Security Engineer, GRC (AI)

Location: Remote; annual team on-site in the US/CAN with total travel below 10%

Salary: $108,600–$131,000 per year

Company

hirify.global builds an agentic experience platform that uses AI agents to help marketing and data teams acquire, retain, and grow customers across web, mobile, and desktop.

What you will do

• Build AI agent workflows and automate repeatable GRC tasks, including evidence ingestion, questionnaire responses, and executive reporting.
• Architect and maintain GRC platform configurations, data relationships, control workflows, custom rules, APIs, and webhooks.
• Design automated evidence collection, continuous control monitoring, and compliance checks across CI/CD pipelines and Terraform infrastructure.
• Embed compliance checkpoints into design reviews and build FAIR-informed quantitative risk modeling pipelines.
• Automate the third-party risk management lifecycle, including vendor intake, scoring, questionnaires, evidence analysis, and remediation tracking.
• Build dashboards and automations for privileged access, access exceptions, remediation, customer trust workflows, security awareness, and training.

Requirements

• At least 3 years of experience in Security Engineering, DevSecOps, Technical GRC, or a closely adjacent function, including a strong engineering track record in automation and tooling rather than only program ownership.
• Proficiency in Python and/or TypeScript, REST APIs, JSON/YAML payloads, webhooks, and building integrations from scratch.
• Hands-on experience building enterprise automation and integrations beyond configuring out-of-the-box features.
• Hands-on experience with a modern GRC platform such as Vanta, Anecdotes, Drata, Secureframe, or similar, including custom workflows, rules, and APIs.
• Working knowledge of SOC 2, ISO 27001/17/18, ISO 42001, and HIPAA sufficient to determine how controls can be tested programmatically.
• Experience shipping AI-assisted automation, such as agent workflows, prompt pipelines, or LLM-integrated integrations, and comfort with Claude Code, Cursor, or equivalent tools.
• Familiarity with AWS IAM, CloudTrail, Config, and GuardDuty; CI/CD workflows such as GitHub Actions; and Terraform or equivalent IaC.
• Strong collaboration and written communication skills across Security, IT, Engineering, Legal/Privacy, and GTM, with the ability to write clear technical documentation.

Culture & Benefits

• Fully remote work with an annual team on-site in the US/CAN; total travel is below 10%.
• Medical, dental, and vision plans; Employee Assistance Program; company-paid life insurance at 3x salary; and short- and long-term disability coverage.
• 401(k) retirement plan with a 4% company match and restricted stock units.
• Flexible Time Off and up to 26 weeks of paid parental leave, including a post-partum night nurse.
• Global reproductive health and family-building support through Carrot.
• Inclusive culture focused on diversity, equity, belonging, ownership, initiative, and continuous improvement.

Hiring process

• Agencies and recruiters must have an active contract in place; unsolicited resumes are treated as gratis referrals.