Senior Security Engineer (AI)

Location: Hybrid role based in San Carlos, California, with 3+ days per week onsite and remote work available on the remaining days. All work must be performed in the United States.

Salary: $173,000–$225,000 annual base salary, plus equity.

Company

hirify.global builds AI-powered aviation systems that improve flight safety, efficiency, and capability for commercial aviation and Department of Defense environments.

What you will do

• Design and implement secure architectures across applications, cloud infrastructure, backend services, and in-cockpit edge systems.
• Protect sensitive data through access management, encryption, and secure data-handling controls.
• Assess and mitigate security risks through vulnerability assessments, penetration testing, threat modeling, and security reviews.
• Lead incident detection, containment, remediation, and follow-up analysis.
• Integrate security into the SDLC through secure code reviews, automated CI/CD and infrastructure-as-code checks, monitoring, and logging.
• Support FedRAMP and DoD authorization processes and secure AI systems against prompt injection, data leakage, and model misuse.

Requirements

• 5+ years of hands-on security engineering experience securing complex systems, data, and production cloud environments.
• Strong knowledge of security principles, threat modeling, defensive security practices, and tools such as SIEM, IDS/IPS, vulnerability scanners, and encryption.
• Experience with AWS or AWS GovCloud and familiarity with NIST 800-53, NIST 800-171, ISO 27001, and CMMC.
• Direct experience with FedRAMP authorization processes, including ATO packages, SSPs, and POA&Ms, and/or DoD IL4/IL5 environments.
• Ability to establish security priorities, build security capabilities from scratch, balance risk against product delivery, and collaborate with software engineers.
• Must be a U.S. Person and eligible to work in the United States; visa sponsorship and visa transfers are not available.

Nice to have

• Experience with aviation, aerospace, DoD customers, or ITAR-controlled environments.
• Knowledge of zero trust architectures, StateRAMP, IL5/IL6 systems, or CUI handling.
• Experience securing mobile, embedded, or edge devices in disconnected or constrained environments.
• CISSP, CISM, CEH, or another relevant security certification.
• Passion for aviation and improving air travel efficiency and safety.

Culture & Benefits

• Small, focused teams with ownership of the systems they build and a fast-moving engineering environment.
• Healthcare coverage with 100% of employee medical premiums covered and 25% of dependent premiums covered.
• Three weeks of paid time off plus 13 or more paid company holidays.
• 401(k) plan available.
• Hybrid work model with regular onsite collaboration in San Carlos.