Senior Security Application Engineer (AI & Cryptography)

Location: Remote, Rancho Cordova, California, United States

Salary: USD 105,440–164,800 yearly

Company

hirify.global is a global memory technology company developing data storage products and cryptographic foundations for firmware, device identity, and product security.

What you will do

• Define detection coverage standards, map threats to MITRE ATT&CK, and track detection quality, MTTD, false positives, and coverage gaps.
• Build detections-as-code, automated triage, supervised agentic response workflows, and secure AI agent identity and delegation controls.
• Develop automation for code signing pipelines, HSM monitoring, certificate lifecycle management, access provisioning, and cryptographic governance.
• Support PKI, firmware signing, device identity, attestation, post-quantum cryptography, and security data platform capabilities.
• Integrate SAST, SBOM, attestation signing, and supply-chain controls into firmware and CI/CD pipelines.
• Lead security engineering initiatives, mentor engineers and analysts, maintain runbooks, and coordinate governance with firmware, manufacturing, and operations teams.

Requirements

• Bachelor's degree in information security, cybersecurity, computer science, software engineering, or a related field.
• Advanced English is mandatory.
• 4–6+ years of relevant hands-on experience in security engineering, detection engineering, product security, or related work.
• Software development experience with Python, API integration, infrastructure-as-code, and CI/CD pipeline development.
• Experience with SIEM/SOAR platforms such as Microsoft Sentinel or Splunk, incident response, MITRE ATT&CK, and end-to-end detection lifecycle ownership.
• Experience with AI agents, RAG or agentic orchestration, MITRE ATLAS, AI security governance, cryptography, HSMs, PKI, certificate management, and code signing.

Nice to have

• Experience with Entrust nShield, Fortanix DSM, EJBCA, KeyFactor, Venafi, or comparable HSM and PKI platforms.
• Firmware or binary signing, SBOM signing, attestation workflows, COSE/CBOR, post-quantum cryptography, ML-DSA, or LMS/LMOD experience.
• Knowledge of NIST FIPS 140-3, CNSA 2.0+, OCP 2.5/3.0+, ISO 27001, or SOX ITGC.
• Experience with Microsoft Defender XDR, Sentinel, Security Copilot, Logic Apps, KQL, Azure, Splunk, MCP, LangChain, or workload identity platforms.

Culture & Benefits

• Remote work arrangement within the United States.
• Collaboration across firmware engineering, CI/CD, manufacturing, product security, and operations.
• Opportunity to contribute to memory technology, product security, AI governance, and post-quantum cryptography initiatives.
• Participation in security governance rhythms including operational reviews, CISO reviews, and the Cryptographic Architecture Board.