Security Engineer (Cloud Security)

Location: On-site in Boston, MA or San Francisco, CA; U.S.-hours coverage required.

Company

hirify.global develops a cloud security platform using runtime context and eBPF-powered sensors for risk prioritization, threat protection, cloud posture discovery, and API security.

What you will do

• Fine-tune detection and response mechanisms.
• Review customer cloud environments proactively to identify risks, exposed attack surfaces, and improvement opportunities.
• Lead in-depth investigations involving supply chain, API, malware, and runtime attacks; document findings and create detection and response playbooks.
• Handle complex and critical incidents escalated from Tier 1 and Tier 2, including live customer engagements.
• Collaborate with Security Analysts, Research, and Backend teams to improve detection quality.
• Contribute to AI-driven detection models using machine learning to improve investigation accuracy and response efficiency.

Requirements

• Must be based in Boston, MA or San Francisco, CA and work on-site; visa sponsorship is not available.
• Hands-on cybersecurity experience in cloud or cloud security environments.
• Strong knowledge of detection engineering, incident response, and threat analysis, including supply chain, API, malware, and runtime attacks.
• Hands-on experience with AWS, GCP, or Azure and container technologies such as Docker or Kubernetes.
• Practical Linux experience, plus networking fundamentals and Python or Bash scripting.
• Strong communication skills and the ability to work directly with customers under pressure; participation in a shared on-call rotation covering nights, weekends, or holidays is required.

Nice to have

• Windows knowledge.
• B.Sc. in Computer Science or Information Security.

Culture & Benefits

• Fast-paced, high-ownership startup environment.
• Opportunity to work independently while collaborating with analysts, researchers, and engineers.
• Clear path toward technical or team leadership as the U.S. presence grows.
• Exposure to emerging threats, attack techniques, and cloud security practices.