Head of PSC Engineering (Product Security)

Location: Remote, United States or Canada. No relocation required. Occasional travel is expected for customer executive reviews, on-site engagements, conferences, and team gatherings.

Compensation: $250,000–$300,000, plus bonus, equity, and full benefits.

Company

hirify.global provides a product security platform for connected devices and embedded systems, helping organizations identify vulnerabilities, manage software supply-chain risks, and meet security and compliance requirements.

What you will do

• Hire, onboard, coach, and develop PSC Engineers while setting objectives, conducting performance reviews, and addressing underperformance.
• Own technical delivery across customer engagements, including scoping, staffing, deliverable reviews, debriefs, Level 2 support, quality criteria, and delivery KPIs.
• Plan team capacity, balance billable engagements with managed-service shifts and capability development, and manage utilization.
• Build and scale PSIRT-as-a-Service and Standards and Regulations Compliance-as-a-Service through runbooks, staffing models, SLAs, and platform capabilities.
• Connect field-built security tooling with the product roadmap and represent PSC Engineering in the Product Paving Council.
• Lead senior customer relationships, service reviews, escalations, technical scoping, and expansion efforts with Sales.

Requirements

• 3+ years of direct people management, including hiring, supervision, development, performance cycles, and handling underperformance.
• Experience mentoring, coaching, and teaching engineers, plus formal management or leadership training.
• 8+ years in product security, embedded and connected-device security, application security, or offensive security, including substantial customer-facing services, consulting, or managed-services experience.
• Hands-on expertise in at least two areas including firmware and binary analysis, embedded or IoT penetration testing, TARA, SBOM and software composition analysis, vulnerability disclosure, CVE/CNA workflows, or PSIRT operations.
• Experience running technical delivery against SLAs, SLOs, quality standards, capacity plans, and utilization targets in a billable environment.
• Knowledge of the EU Cyber Resilience Act and relevant standards including IEC 62443, RED EN 18031, FDA premarket cybersecurity requirements, ETSI EN 303 645, NIST SSDF, ISO/IEC 29147 and 30111, CVSS, VEX, SPDX, and CycloneDX.

Nice to have

• Experience building a managed service or consulting offering, including processes, runbooks, staffing models, and SLAs.
• CISSP, CSSLP, GIAC, OSCP, CISM, CRISC, ISO/IEC 27001 Lead Implementer, or IEC 62443 Cybersecurity Expert credentials.
• Experience securing aerospace, medical, automotive, energy, or industrial cyber-physical systems.
• Knowledge of JSIG, ICD 503, or NIST SP 800-160; clearance eligibility.

Culture & Benefits

• Fully distributed workforce with a remote-first culture.
• Bonus, equity, and full benefits.
• Mission-driven work focused on securing connected products, IoT, critical infrastructure, and embedded systems.
• Culture centered on customer focus, ownership, transparency, integrity, urgency, learning, and measurable results.
• Occasional travel for customer engagements, conferences, and team gatherings.