> Markdown version of [/jobs/ext/4638436-staff-principal-engineer-product-security](https://www.wearedevelopers.com/jobs/ext/4638436-staff-principal-engineer-product-security). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Staff / Principal Engineer, Product Security - **Company:** Radar, Inc. - **Location:** New York, NY, United States - **Salary:** $250,000 - $300,000 - **Contract:** Permanent contract - **Skills:** Flutter, Microsoft Windows, Application Programming Interfaces (APIs), Amazon Web Services, Applications Architecture, Software System Penetration Testing, Information Engineering, IP Addressing, Systems Development Life Cycle, Software Engineering, TypeScript, ReactJS, Software Security, Swift (Programming Language), Backend, Kotlin, React Native, Front End Software Development, Objective C++ - **Published:** November 8, 2026 - **Apply:** https://www.juju.com/job/28_25304_3139c94f348bd0f7581a6f40bccbd595 ## About the Role * Be a builder who understands automation, application architecture, and application development. * Have experience working on mobile penetration testing. * Have experience working in regulated industries where motivated threat actors are a reality. Bonus Points If You * Are a former technical founder * Have experience with compliance testing for regulated gaming apps. ## Description We're looking for a Staff / Principal Engineer, Product Security to help us build the security foundation of our platform and products. As a geolocation and compliance company, Radar develops mobile & web SDKs and server side APIs for customers to use in their applications for their critical geolocation use cases. For example, our Protect product enforces precise jurisdictional inclusion / exclusion geofences for regulated gaming use cases and stops fraud from risky devices, users and IP addresses. The overall application surface area is multi-stack, covering mobile SDKs, web SDKs, web dashboard, server APIs, and the Radar Verify desktop apps for Mac and Windows. As new threat patterns are continually emerging in both the client and server side, this is a key role that contributes to keeping our software and solutions one step ahead. How We Work Most of our engineering team are former technical co-founders or former Radar interns from schools like Waterloo and CMU. Most engineers at Radar fit one of two molds, technically: either Staff level expertise in one stack, or "Multi-Stack" at any level. We say "Multi-Stack" because "Full-Stack" has the connotation of "Frontend and Backend", but Radar Engineers might also work on Mobile or Data engineering. Not that you need to be an expert in all of those, but a desire to learn, jump around to different stacks, and get things done is the important part. We care a lot about shipping fast and talking to customers. We're committed to our product vision of full-stack location infrastructure, but we also know that customer feedback is a treasure map to gold. Even though Slack is the brain of our company, working together in-person in our NYC HQ is the fastest way for us to get things done. We meet on Mondays to plan out work for the week in small groups and use Linear for planning. To us, a week is a long time, and we expect to ship big things every week. The Stack Mobile SDKs are Objective-C, Swift, Kotlin, React Native, Flutter and more, the frontend is React, the backend is TypeScript and Rust. Everything is deployed to AWS., * Build and influence our security product and platform roadmaps based on your findings, ensuring our systems remain secure in everything we do. * Think like an adversary to identify ways to circumvent Radar geolocation & compliance checks throughout the SDLC, including automated penetration tests against Radar mobile & web SDKs, desktop apps and server side APIs. * Collaborate and contribute as an engineer and a defender, and work alongside product and platform engineers to ensure that the products Radar builds are inherently secure before they reach customers. * Integrate practical and effective security standards throughout Radar's SDLC process, including guidance for AI security best practices. * Embody our "Walk a mile" value by walking around to QA and secure the Radar SDKs. * Take feedback from Radar customers, prospects, and peers and incorporate it into your work to make them successful.