Security Officer

Location: Remote-first, with offices in Warsaw and Kyiv

Company

hirify.global is an agentic AI platform for creating, launching, and scaling paid advertising for small, medium-sized, and enterprise businesses.

What you will do

• Assess product and infrastructure security and identify, prevent, and remediate vulnerabilities.
• Lead incident response and help defend systems against attacks in real time.
• Define security initiatives, prioritize the security roadmap, and retain technical decision-making authority from a security perspective.
• Integrate security into the software development lifecycle and CI/CD pipelines while working hands-on with DevOps and Platform teams.
• Drive SOC 2 Type 1, CASA, and ISO 27001 compliance initiatives, including policies, controls, and access management across AWS infrastructure.
• Review architecture and code for security risks and support B2B clients with security reviews and due diligence.

Requirements

• 7+ years of engineering experience, including 3+ years as a Security Officer or Security Engineer; combined Security/DevOps experience is also relevant.
• Hands-on backend development experience with Node, JavaScript, TypeScript, Java, or C#/.NET.
• Strong practical experience with DevOps, cloud infrastructure, vulnerability remediation, and security incident handling.
• AWS Professional-level certification; a security-focused Associate certification may also be considered.
• Hands-on ownership of SOC 2 and/or ISO 27001 control implementation and experience with external security audits.
• English at B2+ level and fluent Ukrainian are required.

Nice to have

• Experience with CASA assessments.
• Experience implementing GDPR, CCPA, or CPRA requirements.
• Understanding of PCI DSS at SAQ-A level.
• GCP certifications or Big Four audit experience.

Culture & Benefits

• Remote-first work setup with offices in Warsaw and Kyiv.
• Opportunity to shape security in a stable, profitable product company and contribute to AI-powered tools.
• Ownership of security decisions, including veto power from a security perspective.
• Growth path toward leading a security team.
• Company-provided work equipment and regular performance reviews.

Hiring process

• Intro call, technical interview, test task, final interview, reference check, and offer.