Senior Staff Product Security Engineer, AI Security & Security Assurance

Location: Hybrid in McLean, Virginia, with 3 days per week onsite; candidates based in the Tysons Corner vicinity will be prioritized.

Annual base salary: $184,000–$245,000.

Company

hirify.global provides the hirify.global Experience Cloud, a SaaS platform for managing experiences, insights, and actions across customer, employee, patient, resident, and candidate experiences.

What you will do

• Lead security reviews for generative AI applications, LLM-powered features, AI agents, agentic workflows, MCP integrations, AI marketplaces, coding assistants, and BYOM capabilities.
• Define security requirements, guardrails, reference architectures, and design patterns for AI-enabled products and services.
• Lead threat modeling and security architecture reviews for critical product and platform initiatives.
• Own product security assurance activities, including assessments, testing strategies, standards, and AI security reviews.
• Establish secure development standards, developer guidance, security enablement programs, and improved security feedback during development.
• Automate security reviews, define program effectiveness metrics, evaluate emerging technologies, and mentor Staff and Senior Engineers.

Requirements

• 12+ years of experience in Product Security, Application Security, Security Architecture, or Security Engineering.
• Experience operating at Staff or Senior Staff level in a technology organization.
• Expertise in threat modeling, security architecture reviews, application security, cloud security, secure SDLC, vulnerability management, and secure design principles.
• Experience securing APIs, microservices, Kubernetes, containers, and cloud-native platforms.
• Knowledge of OWASP, NIST, SOC 2, ISO 27001, and PCI DSS.
• Ability to influence engineering organizations and drive security outcomes without direct authority.

Nice to have

• Experience securing generative AI applications, LLM-based products, AI agents, agentic workflows, MCP integrations, and RAG systems.
• Familiarity with prompt injection, indirect prompt injection, tool abuse, agent authorization, data leakage, model abuse, and AI threat modeling.
• Security certifications such as CISSP, CSSLP, GIAC, or AWS Security Specialty.

Culture & Benefits

• Medical, dental, and vision coverage.
• 401(k), disability, life, and AD&D insurance.
• Statutory leaves, paid parental leave, and paid holidays.
• Equal opportunity workplace focused on diversity and inclusion.