Security Research Engineer (AI/Cybersecurity)

Location: New York City, United States; on-site

Salary: $180,000–$220,000 per year, plus equity

Company

hirify.global is building AI-driven cybersecurity products that help companies detect and defend against emerging threats.

What you will do

• Build scalable adversary-emulation scenarios and automation across cloud, identity, endpoint, SaaS, AI, and data environments.
• Validate detections end to end across collection, normalization, enrichment, detection, and investigation workflows.
• Research attacks against AI systems, including prompt injection, MCP and tool abuse, retrieval poisoning, excessive agent privileges, and unauthorized actions.
• Investigate attacks against data planes, reproduce emerging exploits, and translate findings into detection hypotheses and bounded emulations.
• Enable safe testing in customer environments using clear scopes, preflight checks, least-privilege access, execution limits, stop controls, and verified cleanup.
• Partner with engineering, SOC teams, and customers to deliver detections, hunt logic, telemetry requirements, regression tests, and purple-team exercises.

Requirements

• 5+ years of hands-on cybersecurity experience, including offensive security, red teaming, adversary emulation, or security research.
• Strong Python skills and experience building reusable security tools with APIs, SDKs, Git, code review, and automated testing.
• Deep practical expertise in at least one cloud or identity ecosystem, including permissions, service identities, sessions, and data access.
• Practical web and API security knowledge, including chaining weaknesses across authorization boundaries.
• Experience reproducing attacks in controlled environments and connecting behavior to audit logs, detection logic, and investigation evidence.
• Sound judgment in sensitive environments, with the ability to define scope, limit impact, protect data, and verify cleanup.

Nice to have

• Experience with Atomic Red Team, MITRE ATT&CK, MITRE ATLAS, purple teaming, or continuous security validation.
• Experience with SQL, detection-as-code, and cloud, identity, SaaS, or endpoint telemetry.
• Hands-on work with MCP servers, RAG systems, model gateways, or repeatable AI evaluations.
• Experience assessing data warehouses, object storage, Kubernetes, CI/CD systems, or software supply chains.
• Contributions to offensive tooling, emulation frameworks, detection content, or published security research.

Culture & Benefits

• Work at the intersection of AI and cybersecurity on emerging attack surfaces.
• Build tools and research that directly improve real-world detection and defense.
• Own work from research through implementation, operational use, and verified outcomes.
• Collaborate closely with detection engineers, researchers, analysts, SOC teams, and customers.
• Competitive compensation of $180,000–$220,000 per year and a top-of-market equity component.