Senior Security Engineer (AI)

Location: Hybrid in San Carlos, California, with 3+ days per week onsite; remaining days may be worked remotely. All work must be performed in the United States.

Base salary: $173K–$225K annually, plus equity.

Company

hirify.global builds an AI platform for safer, more efficient aviation and delivers mission-critical systems for commercial airlines and Department of Defense environments.

What you will do

• Design and implement secure architectures across applications, cloud infrastructure, backend services, and in-cockpit edge systems.
• Protect sensitive data through access management, encryption, and secure data-handling controls.
• Assess and mitigate vulnerabilities through penetration testing, security reviews, threat modeling, and secure code review.
• Lead incident detection, containment, remediation, monitoring, and follow-up analysis.
• Integrate security checks into CI/CD and infrastructure-as-code workflows in partnership with software engineers.
• Support FedRAMP and DoD authorization processes, including ATO packages, SSPs, POA&Ms, CMMC readiness, and DFARS alignment.

Requirements

• 5+ years of hands-on security engineering experience securing complex systems, data, and production cloud environments.
• Strong knowledge of security principles, threat modeling, defensive security practices, and common security tools including SIEM, IDS/IPS, vulnerability scanning, and encryption.
• Experience with AWS or AWS GovCloud and familiarity with NIST 800-53/800-171, ISO 27001, and CMMC.
• Direct experience with FedRAMP authorization processes and/or DoD IL4/IL5 environments.
• Ability to establish security priorities, build security capabilities from scratch, and collaborate with software engineers on secure system design.
• Must be a U.S. Person and able to perform all work in the United States; visa sponsorship and visa transfers are not available.

Nice to have

• Experience with aviation, aerospace, DoD customers, or ITAR-controlled environments.
• Experience with zero trust, StateRAMP, IL5/IL6, classified or CUI systems, and disconnected or constrained edge devices.
• Experience securing mobile, embedded, or edge systems.
• Security certifications such as CISSP, CISM, or CEH.
• Passion for aviation and improving air travel safety and efficiency.

Culture & Benefits

• Fast-moving environment with small, focused teams, direct ownership, and limited process overhead.
• 100% of employee medical premiums covered and 25% of dependent premiums covered.
• Three weeks of paid time off plus 13 or more paid company holidays.
• 401(k) plan available; no current employer match.
• Equity opportunities and compensation benchmarks based on professional salary data.