Application Security Engineer III (AI)

Location: Seattle, Washington, United States

Salary: $146,000–$204,500 per year, with potential pay up to $233,500 based on sustained performance.

Company

hirify.global is a global travel company operating consumer travel brands, a B2B travel network, and travel advertising businesses.

What you will do

• Embed shift-left security requirements and controls across the software development lifecycle, from design through deployment.
• Integrate, maintain, and improve security automation across CI/CD pipelines, including SAST, DAST, SCA, dependency scanning, and software supply-chain protections.
• Configure and tune vulnerability management platforms, triage findings, reduce false positives, and improve developer remediation workflows.
• Partner with product, engineering, platform, privacy, compliance, infrastructure, and security stakeholders to address application security risks.
• Conduct threat modeling, security code reviews, and system design reviews covering low-level design, APIs, and data models.
• Operate AI/ML-enabled security solutions and apply AI/ML concepts to improve security outcomes.

Requirements

• Bachelor’s degree in Computer Science or a related technical field, or equivalent professional experience.
• At least 5 years of relevant experience in application security, product security, DevSecOps, or security engineering.
• Experience with cloud-native services, modern CI/CD pipelines, secure software delivery, and software supply-chain security.
• Practical knowledge of SBOMs, signing or attestation, secure build pipelines, SAST, DAST, and SCA.
• Experience operating security tools such as Qualys, Wiz, GHAS, or Ox Security and integrating them with GitHub Actions, Jenkins, Spinnaker, ticketing systems, and developer workflows.
• Programming experience with Java or Python for security automation.

Nice to have

• Experience applying AI/ML and agentic AI to vulnerability triage, prioritization, classification, enrichment, or remediation.
• Understanding of AI/ML security implications, including the OWASP LLM Top 10 and basic penetration testing.
• Experience enabling developers to adopt secure development practices through standards, guidance, and playbooks.
• Experience reducing vulnerability backlogs and improving remediation SLAs through automation and data-driven operational improvements.

Culture & Benefits

• Collaborative work across product, engineering, platform, privacy, compliance, infrastructure, and security teams.
• Medical, dental, and vision coverage.
• Paid time off and an Employee Assistance Program.
• Wellness and travel reimbursement, travel discounts, and IATAN membership.
• Inclusive and accessible recruiting and employment environment.