Application Security Engineer III (AI)

Location: United States (Remote); occasional travel of up to 10% may be required.

Salary: $106,800–$133,500 annually, plus an annual discretionary bonus.

Company

hirify.global operates a B2B e-commerce marketplace for surplus assets, supporting corporate and government sellers and qualified buyers worldwide.

What you will do

• Perform penetration testing, vulnerability scanning, and manual and automated secure code reviews, including reviews of AI-generated code.
• Conduct threat modeling and application and cloud architecture reviews to identify attack vectors and define secure design patterns.
• Partner with engineering teams on secure coding standards, OWASP risks, remediation priorities, and Secure SDLC governance.
• Configure WAFs, CI/CD security pipelines, automated scanning, software composition analysis, SBOM processes, and artifact verification.
• Secure identity systems, APIs, containers, infrastructure as code, secrets, payment integrations, and sensitive data.
• Support vulnerability management, security logging, incident response, forensic readiness, and post-incident corrective actions.

Requirements

• At least 5 years of experience in application security, secure software development, penetration testing, or DevSecOps security.
• Experience influencing multiple engineering teams and driving vulnerability remediation.
• Strong knowledge of AWS, Azure, or GCP security, web security fundamentals, threat modeling, secure code reviews, and SSDLC.
• Experience with Git, Docker or Kubernetes, CI/CD security, infrastructure as code, API gateways, OAuth 2.0, and secrets managers.
• Ability to review and validate AI-generated code and understand AI-related security, privacy, and intellectual property risks.
• Programming experience with JavaScript/TypeScript, C#/.NET, Java, Python, or PowerShell; familiarity with SAST, DAST, SCA, and secret-scanning tools.

Nice to have

• CISSP, CSSLP, CASE, OSCP, or OSWE certification.
• Experience with Claude Security, GitHub Copilot, Dependabot, GitHub Advanced Security, SonarQube, or OWASP Dependency-Check.

Culture & Benefits

• Primarily remote work from a home office or another approved remote environment.
• Healthcare coverage including medical, dental, vision, prescription drugs, and FSAs.
• 401(k), paid time off, holidays, paid parental leave, life and disability insurance.
• Employee Assistance Program, professional development, and tuition assistance.