Senior Application Security Engineer (AI)

Location: United States; remote position

Salary: $104,300–$193,700 annual base salary, plus eligibility for a discretionary annual bonus.

Company

hirify.global operates in the corporate travel industry and provides travel-related services.

What you will do

• Design, implement, and maintain secure CI/CD pipelines with security testing across the software development lifecycle.
• Implement and tune SAST, DAST, SCA, container scanning, API security, and centralized security reporting.
• Guide development teams on secure coding and help govern the secure adoption of agentic AI coding tools.
• Ensure application security compliance with PCI-DSS, GDPR, SOC 2, and related standards.
• Build KPI and metrics reporting and present application security findings to leadership.
• Mentor junior engineers and promote a security-first culture.

Requirements

• 5+ years of professional software development experience with expertise in three or more major programming languages, including languages such as Python, Go, Java, C#, Ruby, JavaScript/TypeScript, Bash, PowerShell, Swift, Kotlin, Objective-C, or Dart.
• 3+ years of hands-on application security or DevSecOps experience.
• Strong knowledge of OWASP Top 10, secure coding, API security, authentication protocols, and secure API design.
• Strong cloud security expertise with AWS, Azure, or GCP, including IAM, network security, encryption, secrets management, and compliance frameworks; multi-cloud experience is required as a certification or additional qualification.
• Experience with CI/CD tools, infrastructure-as-code, containers, orchestration, and network security.
• Experience with agentic AI programming and risks including hallucinated dependencies, insecure code injection, governance gaps, and AI-specific security threats.
• Experience with threat modeling, risk assessment, communicating risks to technical and non-technical audiences, and contributing to governance frameworks.
• Knowledge of PCI-DSS, GDPR, and CCPA; experience with penetration testing or red team operations and MLSecOps, including model security, data pipeline protection, and AI/ML supply-chain security.
• Professional security certification such as CISSP, GIAC, OSCP, AWS Security Specialty, Azure Security Engineer, or similar.
• Experience in travel, hospitality, or e-commerce; open-source contributions or security research publications are also requested.

Nice to have

• Experience with multiple cloud platforms across AWS, Azure, and GCP.
• Open-source contributions or security research publications demonstrating commitment to the security community.

Culture & Benefits

• Inclusive and collaborative culture where colleagues can contribute ideas and perspectives.
• Flexible benefits tailored to each country, including health and welfare insurance, retirement programs, parental leave, adoption assistance, and wellbeing resources.
• Travel deals on flights, hotels, cruises, car rentals, and other travel services.
• Access to more than 20,000 learning courses, leadership programs, and internal career opportunities.
• Inclusion groups and support for reasonable workplace accommodations.

Hiring process

• Applicants are encouraged to apply even if they do not meet every listed requirement.
• Reasonable accommodations are available during the hiring process upon request.