Назад
Company hidden
8 дней назад

Staff / Staff II - Application Security Engineer (AI)

220 000 - 270 000$
Формат работы
remote (только USA)/hybrid
Тип работы
fulltime
Грейд
senior
Английский
b2
Страна
US
Вакансия из списка Hirify.GlobalВакансия из Hirify Global, списка международных tech-компаний
Для мэтча и отклика нужен Plus

Мэтч & Сопровод

Для мэтча с этой вакансией нужен Plus

Описание вакансии

Текст:
/
TL;DR
Staff / Staff II - Application Security Engineer (AI): Defining application security architecture, threat modeling, secure code review, and security program improvements across distributed, cloud-native, mobile, Java, and C++ product environments with an accent on scalable security standards and AI-assisted analysis. Focus on identifying architectural risk, researching vulnerabilities, improving SDL and penetration testing programs, and driving cross-team remediation and automation.

Location: Hybrid, three days per week in the Atlanta, Georgia or Mountain View, California office; candidates must reside within a reasonable commuting distance. Fully remote work may be available for qualified candidates located in the United States. Travel to remote offices twice per year.

Salary: USD $220,000–$270,000 per year, with potential eligibility for a corporate bonus program.

Company

hirify.global develops an AI-driven digital work platform combining unified endpoint management, virtual apps and desktops, digital employee experience, and security and compliance solutions.

What you will do

  • Set application security standards, reference architectures, patterns, and guardrails across the product portfolio.
  • Lead threat modeling for distributed, cloud-native, and mobile architectures and influence designs before implementation.
  • Perform manual secure code reviews and application security testing across Java and C++ codebases.
  • Scale security analysis with AI-assisted tooling, custom CodeQL queries, variant analysis, and vulnerability research.
  • Define and improve the SDL, feature security reviews, penetration testing, security champions, training, and program metrics.
  • Influence engineering and product leadership, drive cross-team remediation, and mentor senior engineers without direct people management.

Requirements

  • 10+ years of hands-on application security experience with demonstrated technical leadership and organizational influence.
  • Deep knowledge of application security vulnerabilities, mitigation techniques, secure design, threat modeling, and security architecture.
  • Proficiency in Java or C++ and the ability to review production code.
  • Security breadth across application, system, cloud, and mobile domains.
  • Experience driving technical change, mentoring senior engineers, and communicating with engineering and product leadership.
  • Bachelor’s degree in Computer Science or a related field preferred, or equivalent education and experience.

Nice to have

  • Experience testing agentic AI systems and using AI tooling for security testing, triage, and documentation.
  • Experience building security automation at scale.
  • Previous penetration testing experience for a multi-tenant SaaS provider.

Culture & Benefits

  • Technical leadership role with a high degree of autonomy and no direct people-management responsibility.
  • Collaboration with security engineers, product managers, and developers in a transparent environment.
  • Work-life balance and a focus on reducing friction for development teams.
  • Health insurance, 401(k) matching, disability insurance, paid time off, employee ownership, and growth opportunities.

Hiring process

  • Success is evaluated through increasing ownership at three, six, and twelve months, including measurable improvements to security posture and program effectiveness.

Будьте осторожны: если работодатель просит войти в их систему, используя iCloud/Google, прислать код/пароль, запустить код/ПО, не делайте этого - это мошенники. Обязательно жмите "Пожаловаться" или пишите в поддержку. Подробнее в гайде →