Назад
Company hidden
5 дней назад

Senior Application Security Engineer (AI)

214 200 - 252 000$
Формат работы
hybrid
Тип работы
fulltime
Грейд
senior
Английский
b2
Страна
US
Вакансия из списка Hirify.GlobalВакансия из Hirify Global, списка международных tech-компаний
Для мэтча и отклика нужен Plus

Мэтч & Сопровод

Для мэтча с этой вакансией нужен Plus

Описание вакансии

Текст:
/
TL;DR
Senior Application Security Engineer (AI): Building and scaling application security across healthcare AI products, infrastructure, and engineering practices with an accent on threat modeling, secure SDLC, AI security, and vulnerability management. Focus on leading security architecture reviews, assessing AI models and agents, conducting penetration testing and code reviews, and influencing secure-by-default systems across the organization.

Location: SF Office, hybrid; compensation varies across U.S. geographic markets.

Salary: $214.2K–$252K base pay, plus equity.

Company

hirify.global develops an AI-powered healthcare platform that converts patient-clinician conversations into structured clinical notes with EMR integrations and auditable AI-generated summaries.

What you will do

  • Lead threat modeling and security architecture reviews for complex systems, new products, and platform initiatives.
  • Define the technical roadmap, standards, guardrails, and scalable assurance practices for the Application Security program.
  • Advise and mentor product and engineering teams on secure coding, application architecture, security features, and vulnerability remediation.
  • Perform manual and tool-assisted secure code reviews, including assessments of AI models, agents, and architectures.
  • Lead internal penetration testing and oversee vulnerability management across products and applications.
  • Support security incident response, engineer training, security awareness, and organization-wide security metrics.

Requirements

  • 7+ years of direct Application Security experience designing and implementing security improvements at scale.
  • Deep proficiency in one or more major programming languages; Python and NextJS are valuable.
  • Extensive experience securing cloud applications and familiarity with containerization technologies such as Kubernetes; GCP experience is valuable.
  • Expert knowledge of web application security, APIs, IAM, identity, authentication, authorization, RBAC, ABAC, and applied cryptography.
  • Deep understanding of security for AI and ML models, agents, and related systems.
  • Experience with security research, open-source security tools, bug bounty programs, cross-functional initiatives, and security metrics.

Culture & Benefits

  • Mission-driven work focused on improving healthcare delivery through generative AI.
  • High-growth startup environment with strong ownership, collaboration, empathy, and continuous feedback.
  • Flexible work hours, inclusive culture, and ongoing professional learning opportunities.
  • Paid holidays, flexible PTO, paid parental leave, and sabbatical leave after five years.
  • Medical, dental, and vision coverage, HSA contributions, 401(k) matching, FSA, commuter benefits, and family-forming support.
  • Personal device allowance, lifestyle wallet, mental health support, and equity grants for full-time employees.

Будьте осторожны: если работодатель просит войти в их систему, используя iCloud/Google, прислать код/пароль, запустить код/ПО, не делайте этого - это мошенники. Обязательно жмите "Пожаловаться" или пишите в поддержку. Подробнее в гайде →