--- title: 'Sr. Security Engineer at ButterflyMX' canonical: 'https://feeny.ai/job/sr-security-engineer-butterflymx-new-york-4bpkte7rcfm8' type: 'job' last_seen: '2026-09-12' --- # Sr. Security Engineer at ButterflyMX - **Company:** ButterflyMX - **Location:** New York, NY - **Employment:** full-time - **Work type:** onsite - **Posted:** 2026-07-07 - **Last confirmed live:** 2026-09-12 - **Apply:** https://jobs.ashbyhq.com/butterflymx/ed40d382-a526-4a00-82b3-737ac1627961 ## Job description ## Our Mission ButterflyMX is on a mission to empower people to automate property access, operations, and security from a single platform. Our products are installed in more than 20,000+ multifamily, commercial, gated communities, and student-housing properties worldwide, including properties developed, owned, and managed by the most trusted names in real estate. Our features are designed for developers, owners, property managers, and tenants, and our products lower operating costs and improve tenant satisfaction. Our Solution Developers and owners no longer need to run building wiring or install in-unit hardware. Property managers can grant building access, revoke permissions, and review entry logs from an online dashboard. Residents can open doors from their smartphones, issue visitor access, and see who is trying to enter the building. Our Culture & Values Fantastic people are the key to our success. As a distributed, primarily remote workforce, we’re looking for more intelligent, passionate, collaborative, ai-forward, and down-to-earth individuals to join our growing team. We’re driven by a shared commitment to excellence and innovation, grounded in our core values: We delight our customers, We take ownership, We are a community of collaborators, We speak up, We think big and do small, and We are tenacious. ## Role Overview ButterflyMX is looking for a Senior Security Engineer to join our growing security team. In this role you will drive application security across the full software development lifecycle — from threat modeling and secure code review to penetration testing and vulnerability management. You will build the internal tooling that powers the “defender’s loop” and scales security. You will partner with product teams to embed security into the development lifecycle and ensure reusable secure patterns. You will partner closely with engineering to build security in from the start, while also owning our active testing program to identify and remediate vulnerabilities before adversaries do. You will be the person engineers come to for clear and practical answers. This is an individual contributor role reporting directly to the CISO. You will help shape our security program as an early, senior hire. ## Responsibilities - Lead application security reviews, threat modeling sessions, and secure code review for new features and significant product changes. - Operate and continuously improve SAST, DAST, and SCA tooling; triage and prioritize findings in partnership with engineering teams to harden the codebase. - Plan and execute internal penetration tests against web applications, APIs, and mobile clients; coordinate and support third-party assessments. - Own the vulnerability management lifecycle from discovery, prioritization, remediation tracking, through to validation. - Develop and maintain secure coding standards, developer security guidance, and training materials. - Integrate security tooling into CI/CD pipelines and champion shift-left security practices across the SDLC. - Investigate security incidents and bug bounty submissions; provide root cause analysis and remediation recommendations. - Partner with Product and Engineering on security architecture decisions for new product capabilities. - Stay current on emerging threats, CVEs, and attack techniques relevant to our technology stack and support continuous program improvement. ## Requirements - 5+ years of experience in application security, with hands-on proficiency in both secure development lifecycle practices and offensive testing. - Strong understanding of web application and API security fundamentals (OWASP, MITRE, CIS, API-specific attack surfaces). - Experience operating SAST/DAST/SCA ASPM tools. - Fluency in scripting or development languages (Python, JavaScript, Go, Ruby, or similar) sufficient to review code and write internal tooling. - Experience designing and executing penetration tests against modern web and mobile applications. - Familiarity with cloud security (AWS preferred, some GCP and OVH) and container/Kubernetes security. - Comfortable in a regulated environment (e.g., SOC 2 or similar). - Excellent written and verbal communication skills; able to translate technical risk to non-technical stakeholders. - Relevant certifications a plus: OSCP, GWAPT, GPEN, CEH, or equivalent. - Proven experience with leveraging AI tools in both professional and personal settings. ButterflyMX is an AI-forward organization and the ability to optimize efficiency using AI is crucial in every role. Can you use LLMs to build a threat model (bootstrap from the code, docs, and vulnerability history, entry points, git history, etc. and leverage Shostack’s four questions); to build an isolation layer to run agents safely and verify exploitability matched to the threat model; to partition the search space and leverage SAST scanners or fuzzers; to filter out non-exploitable findings and triage for patch priority; and, to rate the severity based on reachability, attacker control, preconditions, authentication, read vs write, and blast radius. ## Compensation The expected base salary range for this position is $170,000-$200,000. Actual compensation will depend on factors including budget, skills, experience, location, and internal equity. This position may also be eligible for bonuses, equity, or other forms of compensation, where applicable. ## Benefits - Comprehensive Medical, Dental and Vision plans (ButterflyMX covers 80% of the cost) starting day 1 - 401(k) plan with a match - 10 paid holidays, 20 vacation days, 5 sick days, 3 floating holidays - Basic Life and Accidental Death and Dismemberment Insurance (ButterflyMX covers 100% of the cost) - Short and Long Term Disability (ButterflyMX covers 100% of the cost) - Paid Family Leave - Employee Assistance Program - Quarterly self-care stipends - Access to optional benefits including pre-tax flexible healthcare spending accounts (FSA and HSA), Dependent Care FSA, and Commuter Benefits, as well as optional Supplemental Life, AD&D, Hospital Indemnity, Legal, Accident, Critical Illness, Pet, and Personal Liability Insurance - And more! ButterflyMX is an equal opportunity employer and we value diversity at our company. We do not discriminate on the basis of race, religion, color, national origin, gender, sexual orientation, age, marital status, veteran status, or disability status. You must have the authorization to work in the US to become an employee. We strive to create an accessible and inclusive experience for all candidates and employees. If you need reasonable accommodations during the application or the recruiting process, please let our recruiting team know. ## About ButterflyMX ## Company Overview - **One-liner**: ButterflyMX provides a unified, cloud-based property access and security platform featuring smart video intercoms, access control, and security cameras for multi-tenant buildings. - **Entity Type**: Private (Series D funded) - **Headquarters**: New York, New York, United States - **Founded**: 2014 - **Founders**: Cyrus Claffey, Mathew Knoff, Kunal Shah, Ivan Mihalj ## Core Business - **Primary industry**: Property Technology (PropTech), Access Control & Security, Software Development - **Target customers**: B2B — Property owners, managers, and developers of multifamily housing, commercial office buildings, student housing, senior living, gated communities, HOAs/condos, and industrial properties. - **Mission**: To enable people to automate property access, operations, and security from a single platform. ## Products & Services - **Video Intercoms**: Cloud-connected, smartphone-powered intercom systems that allow residents and staff to see and speak with visitors and grant access remotely. - **Access Control**: A unified platform to manage and automate entry for doors, gates, and elevators from a smartphone or computer. - **Elevator Controls**: Restrict and manage elevator access, integrating with the broader access control system. - **Vehicle Access**: Readers and controls for parking garages and gated communities. - **Package Room**: A system to manage and track package deliveries, integrated directly into the property access platform. - **Security Cameras**: Integrated video surveillance for property-wide security. - **Smart Locks**: Integrations with third-party smart locks to be managed from the same platform. - **QR Code Intercom**: Touchless access via QR codes for visitors and deliveries. ## Market Standing - **Valuation/Market Cap**: Not disclosed (Private company) - **Key Metric – Total Funding**: $108.5M. - *Funding Rounds*: Angel ($1.8M, 2015), Seed ($2.0M, 2017), Series A ($5.5M, 2018, led by Spencer Rascoff), Series C ($35.0M, 2020, led by Volition Capital), Series D ($50.0M, 2021, led by JMI Equity). - **Key Metric – Revenue**: $23.8M (estimated annual revenue, per LinkedIn/Growjo data). - **Key Metric – Install Base**: Trusted by over 20,000 properties. - **Notable Investors/Partners**: JMI Equity, Volition Capital, Spencer Rascoff (Zillow co-founder). Key integrations include popular property management software (e.g., Yardi, Entrata, AppFolio). - **Growth Signals**: Headcount of 300+ employees globally, with a 22.1% YoY headcount increase. Operates in 12 countries. Acquired Cloudkeyz (2022) to expand its European presence and capabilities. ## Competitive Advantages - **First-Mover for Smartphone Intercoms**: Created the world's first smartphone-powered video intercom in 2015, establishing brand recognition and market leadership. - **Unified Platform**: Combines video intercoms, access control, elevator controls, vehicle access, package management, and security cameras into a single, intuitive cloud-based system, reducing operational complexity for property managers. - **Ecosystem Integrations**: Deep integrations with the most widely used property management systems (PMS) and access control hardware, creating a sticky, embedded solution. - **Hardware + Software Model**: Designs and manufactures sleek, modern hardware that is paired with powerful, feature-rich software, creating a high-quality user experience and a barrier to entry. - **Large, Established Install Base**: Over 20,000 properties use their system, providing a massive network effect and a wealth of customer data to improve the product. ## Strategic Focus - **Platform Expansion**: Continuing to unify and add capabilities beyond the core intercom (e.g., vehicle access, package rooms, elevator controls) to be the single access layer for an entire property. - **AI Integration**: Actively hiring for a "Director, AI Strategy & Transformation," signaling a push to use AI for predictive maintenance, enhanced security analytics, and smarter visitor management. - **Global Reach**: Expanding its international footprint, particularly in Europe (with a European HQ in Croatia), and growing its team across the US, Canada, and other regions. - **Deepening Integrations**: Building more robust, bi-directional integrations with the broader proptech ecosystem to automate workflows for property managers (e.g., automated move-ins/move-outs, self-guided tours). ## Why Work Here - **Culture & Values**: The company promotes a transparent and flexible culture, with values centered on ownership, tenacity, speaking up, customer-first, big-picture thinking, and collaboration. They describe themselves as "down-to-earth" and collaborative. - **Remote/Hybrid Policy**: Described as a "mostly remote workforce." The company has 4 offices (global HQ in NYC, European HQ in Croatia), but many roles are remote-friendly (e.g., jobs listed as "US Remote"). - **Growth Trajectory**: High growth phase with a 22% YoY headcount increase and an ambitious product roadmap, offering opportunities for career advancement and impact. - **Diverse Team**: A team of 300+ engineers, designers, sales, and marketers from around the world, with operations in 12 countries. - **Perks & Benefits**: Notable perks include a 401(k) match, quarterly stipends for self-care, and a transparent, flexible work environment. ## Sources 1. [butterflymx.com - About](https://butterflymx.com/about/) 2. [butterflymx.com - Careers](https://butterflymx.com/careers/) 3. [linkedin.com - ButterflyMX](https://www.linkedin.com/company/butterflymx) 4. [jobs.ashbyhq.com - ButterflyMX](https://jobs.ashbyhq.com/butterflymx) 5. [butterflymx.com - Homepage](https://butterflymx.com/) ## Other roles at ButterflyMX - [Principal Product Manager, Mobile](https://feeny.ai/job/principal-product-manager-mobile-butterflymx-united-states-yg9n459v4wwq) — United States - [Sales Account Executive (Hybrid)](https://feeny.ai/job/sales-account-executive-hybrid-butterflymx-new-york-vxqt1jsv38h2) — New York, NY - [Sales Account Executive](https://feeny.ai/job/sales-account-executive-butterflymx-united-states-vk2cg56ca2ga) — United States - [Channel Sales Territory Manager](https://feeny.ai/job/channel-sales-territory-manager-butterflymx-united-states-zh3kwyq7e4hk) — United States - [Channel Sales Territory Manager](https://feeny.ai/job/channel-sales-territory-manager-butterflymx-arizona-bvr54ytct6nm) — Arizona - [Channel Sales Territory Manager](https://feeny.ai/job/channel-sales-territory-manager-butterflymx-utah-jdgngn2c1y7r) — Utah - [Channel Sales Territory Manager](https://feeny.ai/job/channel-sales-territory-manager-butterflymx-nevada-gephfvra9156) — Nevada - [Channel Sales Territory Manager](https://feeny.ai/job/channel-sales-territory-manager-butterflymx-washington-rhvs5gmd3d5k) — Washington, DC - [Channel Sales Territory Manager](https://feeny.ai/job/channel-sales-territory-manager-butterflymx-oregon-mfnrf7db3mp0) — Oregon - [Channel Sales Territory Manager](https://feeny.ai/job/channel-sales-territory-manager-butterflymx-denver-wg2vpj7z7mq5) — Denver, CO