Staff Product Security Engineer (AI)

Location: Remote within the continental United States

Salary: $145,300–$244,850 USD annually for US-based employees; compensation varies by location and employment circumstances.

Company

hirify.global develops software and operates a cybersecurity organization focused on protecting products and embedding security across the software development lifecycle.

What you will do

• Partner with Engineering throughout the software development lifecycle to identify risks, implement security controls, and promote secure deployment practices.
• Lead threat modeling, secure architecture reviews, vulnerability validation, risk-based prioritization, and remediation efforts.
• Define secure coding standards, policies, secure-by-design principles, and standardized secure deployment guardrails.
• Improve application security testing programs, including SAST, SCA, DAST, container scanning, application testing, and penetration testing.
• Use AI-assisted tooling and automation to scale security workflows and support the security of AI-enabled applications and development processes.
• Build security training, documentation, developer enablement, Security Champions programs, and cross-functional security partnerships.

Requirements

• 4–5 years of experience in product security, application security, software engineering, or a related field.
• Experience with SAST, SCA, DAST, container security scanners, CI/CD security controls, and DevSecOps practices.
• Programming experience with one or more of Python, Go, Java, JavaScript/TypeScript, or Ruby.
• Deep expertise in threat modeling, secure architecture design, vulnerability management, and security testing.
• Experience influencing engineering organizations and driving security initiatives across multiple teams.
• Must be able to work remotely from within the continental United States.

Nice to have

• Knowledge of OWASP AI Security and Privacy Guide, NIST AI Risk Management Framework, Cybersecurity AI, or OpenSSF AI/ML Security Framework.
• Experience with Kubernetes, containerized applications, AI-powered security tools, and security researcher or bug bounty disclosures.

Culture & Benefits

• Collaboration across Engineering, Security Operations, and other cybersecurity teams.
• Medical, dental, vision, disability, life, and AD&D insurance options.
• 401(k) plan with company matching, HSA employer contribution, and flexible spending accounts.
• Flexible vacation policy, paid holidays, sick leave, and paid parental leave.
• Potential eligibility for a corporate bonus plan, role-specific commission, and equity participation.