Security Engineer (AI)

Location: Remote

Company

hirify.global builds open-source AI language models and agents, including Hermes Agent, for consumers and Fortune 500 enterprises across SaaS, dedicated VPC, self-hosted, and air-gapped environments.

What you will do

• Own production security across AWS, GCP, Azure, and Vercel.
• Secure multi-tenant SaaS, dedicated VPC, self-hosted Kubernetes, and air-gapped deployments.
• Protect the Hermes Agent platform through sandboxing, kernel-level file system and network isolation, agent identity, credential controls, egress controls, and trace integrity.
• Own SOC 2 technical controls, evidence collection, remediation, and ongoing readiness.
• Lead vulnerability management, penetration testing, incident response, cloud-native security monitoring, and secure software development controls.
• Support enterprise security reviews, architecture assessments, questionnaires, and penetration-testing requirements while partnering with engineering, infrastructure, product, FDE, and operations.

Requirements

• 8+ years of security engineering experience with deep hands-on infrastructure and multi-cloud security expertise.
• Experience securing production SaaS environments and owning security end-to-end at a fast-growing technology company.
• Strong Kubernetes, identity, and IAM fundamentals, including enterprise SSO, SAML, and SCIM.
• Experience implementing SOC 2 or ISO 27001 engineering programs.
• Strong understanding of vulnerability management, incident response, access controls, penetration testing, and secure software development.
• Interest in securing agentic AI systems and addressing agent identity, tool permissions, prompt injection, and data provenance risks.

Nice to have

• Experience supporting regulated customers, financial services organizations, or air-gapped deployments.
• Experience securing AI, machine learning, or open-source systems.
• Experience with cloud-native detection and response tooling.
• Familiarity with kernel-level sandboxing, network isolation, and agent security.
• Experience supporting Fortune 500 security reviews, architecture assessments, and penetration-testing requirements.

Culture & Benefits

• Remote, full-time role in an open-source-native engineering culture.
• Hands-on work across infrastructure, products, and enterprise deployments.
• Pragmatic security practices designed to maintain high development velocity.

Hiring process

• Apply by email with the role in the subject, a resume or CV, a cover letter, and a portfolio showcasing relevant work.