Senior Security Engineer (AI)

Location: Hybrid role based in San Carlos, California, with 3+ days per week onsite; all work must be performed in the United States.

Salary: $173,000–$260,000 per year, plus equity.

Company

hirify.global builds AI systems for safer, more efficient aviation and delivers mission-critical technology for commercial airlines and Department of Defense customers.

What you will do

• Design and implement secure architectures across applications, cloud infrastructure, backend services, and in-cockpit edge systems.
• Protect sensitive data through access management, encryption, and secure data-handling controls aligned with NIST requirements.
• Identify and mitigate risks through vulnerability assessments, penetration testing, threat modeling, and security reviews.
• Lead incident detection, containment, remediation, and follow-up analysis.
• Integrate security into the SDLC through secure code reviews, automated CI/CD and infrastructure-as-code checks, monitoring, and logging.
• Support FedRAMP and DoD authorization processes, CMMC readiness, DFARS alignment, and security controls for AI systems.

Requirements

• Must be a U.S. Person and able to work in the United States; visa sponsorship and visa transfers are not available.
• 5+ years of hands-on security engineering experience securing complex systems and production cloud environments, preferably AWS or AWS GovCloud.
• Strong knowledge of security principles, threat modeling, defensive security practices, and security technologies such as SIEM, IDS/IPS, vulnerability scanning, and encryption.
• Experience with NIST 800-53/800-171, ISO 27001, CMMC, FedRAMP authorization processes, or DoD Impact Level 4/5 environments.
• Ability to collaborate with software engineers on secure system design and take ownership of security priorities in a fast-moving environment.
• Hands-on analytical and problem-solving skills, with a focus on aviation safety and efficiency.

Nice to have

• Experience with aviation, aerospace, DoD customers, or ITAR-controlled environments.
• Familiarity with zero trust architectures, StateRAMP, IL5/IL6 systems, or CUI handling.
• Experience securing mobile, embedded, or edge devices in disconnected or constrained environments.
• Security certifications such as CISSP, CISM, or CEH.

Culture & Benefits

• Fast-moving environment with small, focused teams, direct ownership, and minimal silos or heavy processes.
• Hybrid work model with remote work available on days not spent onsite.
• Medical premiums covered at 100% for employees and 25% for dependents.
• Three weeks of paid time off and 13+ paid company holidays.
• 401(k) plan and meaningful equity opportunities.