Senior Application Security Engineer (AI)

Location: Remote, Tel Aviv-Jaffa, Israel

Company

hirify.global is a sovereign AI and national cyber-defense company helping governments secure critical systems, connect fragmented information, and turn sensitive data into decisions.

What you will do

• Own application security across the SDLC, including security requirements, threat modeling, secure design reviews, code reviews, application and API testing, and production hardening.
• Implement scalable cloud and platform security controls, identity guardrails, and secure-by-default practices.
• Design controls for multi-account and multi-cloud environments using Terraform, policy-as-code technologies, and automated remediation workflows.
• Partner with Security, Engineering, Platform, DevOps, and IT teams to reduce security risk and improve secure engineering practices.
• Define and report metrics covering control coverage, vulnerability trends, remediation timelines, security exceptions, and baseline compliance.
• Translate technical risk into clear remediation guidance and influence engineering and leadership stakeholders.

Requirements

• 6+ years of relevant experience in security engineering, application or product security, cloud or platform security, software engineering, or infrastructure engineering.
• Deep expertise in application/product security or cloud/platform security, with hands-on capability across the other domain.
• Strong programming and automation skills; Python proficiency is required. Go or Bash is beneficial.
• Experience with threat modeling, secure design, code review, application and API testing, CI/CD security controls, OWASP risks, and secure design principles.
• Hands-on experience securing a major public cloud platform, including IAM, workloads, networks, logging, containers or Kubernetes, secrets, and key management.
• Experience with SAST, DAST, SCA, secrets scanning, CSPM or CNAPP, Kubernetes admission controls, supply-chain security, CIS benchmarks, and relevant security frameworks.

Nice to have

• Experience with Go or Bash.
• Experience running a Security Champions, bug bounty, or responsible disclosure program.
• Experience delivering hands-on secure engineering training.
• Experience securing AI-assisted development workflows, enterprise AI tools, agent-based integrations, or MCP-connected systems.

Culture & Benefits

• Work on sovereign AI and national cyber-defense systems at global scale.
• Collaborate with AI researchers, cyber operators, government experts, Security, Engineering, Platform, DevOps, and IT teams.
• Contribute to secure-by-default systems and security practices across the organization.