InfoSec Engineer – Endpoint, Identity & AI Security

Location: Petach Tikva, Israel; primarily office-based

Company

hirify.global is presented as a cybersecurity company focused on protecting digital infrastructure and enterprise customers.

What you will do

• Design, implement, and manage enterprise security capabilities across endpoint security, identity and access management, and AI security.
• Develop Zero Trust strategies, identity governance controls, hardened security baselines, endpoint DLP, mobile security, and BYOD protections.
• Lead AI security governance by defining controls, policies, and threat models for enterprise AI tools and models.
• Evaluate AI data flows, prompt injection risks, model access controls, and data exfiltration vectors.
• Perform threat modeling, security architecture reviews, technology evaluations, and hands-on proofs of concept.
• Investigate identity and endpoint incidents with Security Operations and collaborate with legal and GRC teams on compliance and remediation.

Requirements

• At least 2 years of hands-on enterprise security engineering experience in identity and access management, endpoint security, and/or cloud security.
• Hands-on experience securing AI models and LLM integrations and implementing enterprise AI security controls.
• Experience with enterprise identity architecture, including Okta, Ping, Entra ID, SailPoint, Saviynt, Active Directory, and Red Hat directory services.
• Knowledge of AWS, Azure, and GCP security, endpoint platforms such as Palo Alto Networks XDR, Microsoft Intune, JAMF, and endpoint DLP.
• Knowledge of threat modeling, application security assessments, network security, encryption, authentication, and authorization.
• Programming or scripting experience with Python, Golang, or PowerShell, plus a bachelor's degree or equivalent education.

Nice to have

• Experience in identity and access, data security, network security, intrusion prevention, monitoring, analytics, and correlation tools.
• Certifications such as Google Cloud Architect, AWS Cloud Architect, CISSP-ISSEP, GIAC Certified Enterprise Defender, or CCSP.

Culture & Benefits

• Most teams work from the office full time, with flexibility when needed.
• Work in a collaborative information security environment focused on innovation, execution, integrity, and inclusion.
• Reasonable accommodations are available for qualified individuals with disabilities or special needs.
• Immigration sponsorship and work visa sponsorship are not available for this role.