Назад
Company hidden
7 дней назад

Senior Engineer, AI Product Security

153 000 - 166 000$
Формат работы
remote (только USA)/hybrid
Тип работы
fulltime
Грейд
senior
Английский
b2
Страна
US
Вакансия из списка Hirify.GlobalВакансия из Hirify Global, списка международных tech-компаний
Для мэтча и отклика нужен Plus

Мэтч & Сопровод

Для мэтча с этой вакансией нужен Plus

Описание вакансии

Текст:
/
TL;DR
Senior Engineer, AI Product Security (AI/Cybersecurity): Securing AI-enabled products across the full development lifecycle, from architecture review and threat modeling through vulnerability remediation and production monitoring, with an accent on AI-native security tooling, secure SDLC, and cloud environments. Focus on assessing AI and software supply-chain risks, integrating automated controls into CI/CD pipelines, and coaching engineering teams on responsible AI security practices.

Location: Remote within the USA; candidates near hirify.global offices may work hybrid on Tuesdays and Wednesdays. Travel 3–5 times per year to offices in New York or Reston, Virginia. Authorization to work in the United States for any employer is required.

Salary: $153,000–$166,000 annually, adjusted based on location, experience, and qualifications.

Company

hirify.global is a self-sustaining nonprofit focused on expanding educational and career opportunities through technology and mission-driven work.

What you will do

  • Partner with product and engineering teams on security architecture, planning, design reviews, threat modeling, and risk assessments.
  • Own the product security engagement lifecycle from design documentation through deployment, monitoring, vulnerability review, and remediation.
  • Secure AI features and develop guidance, controls, and tooling for AI use in products, engineering, and security operations.
  • Deploy security tooling across cloud environments and integrate automated controls into CI/CD pipelines.
  • Coach developers and junior engineers on secure SDLC practices and the responsible use of AI coding tools.
  • Define product security KPIs, contribute to roadmap decisions, and support incident response initiatives.

Requirements

  • 5–8 years of product security experience covering threat modeling, architecture review, vulnerability remediation, and production monitoring.
  • Expertise in application security, secure SDLC, CI/CD pipeline security, cloud environments, OWASP, and CIS; AWS experience is preferred.
  • Strong knowledge of AI and agentic AI security risks in software engineering and software products.
  • Knowledge of SOC 2, ISO 27002, PCI, and PII requirements, including translating them into practical engineering guidance.
  • Hands-on experience with JavaScript/TypeScript or Python and the ability to review application architecture for security, testability, and maintainability.
  • Must be authorized to work in the United States for any employer and able to travel 3–5 times per year to hirify.global offices.

Nice to have

  • AWS experience.
  • Experience shaping backlog prioritization and roadmap decisions from a security perspective.
  • Expertise across multiple technical security domains and a strong practice of documenting and sharing knowledge.

Culture & Benefits

  • Fully remote work within the USA, with a hybrid option for candidates near hirify.global offices.
  • Mission-driven nonprofit environment focused on educational and career opportunities.
  • Collaborative, inclusive culture with knowledge sharing, feedback, and continuous learning.
  • Transparent compensation discussions and salary adjustments based on location.
  • Comprehensive benefits and a supportive work environment.

Hiring process

  • Resume and application review followed by a recruiter phone or video screen.
  • Hiring manager interview, performance exercise, panel interview, leadership conversation, and reference checks.
  • Applications are reviewed immediately and remain open for at least five business days.

Будьте осторожны: если работодатель просит войти в их систему, используя iCloud/Google, прислать код/пароль, запустить код/ПО, не делайте этого - это мошенники. Обязательно жмите "Пожаловаться" или пишите в поддержку. Подробнее в гайде →