Application Security Engineer (AI)

Location: Remote, U.S.-based only; up to 10% travel may be required

Company

hirify.global provides cybersecurity expertise, solutions, and services focused exclusively on information security for commercial and government organizations.

What you will do

• Run and tune SAST, DAST, SCA, secrets, and Infrastructure-as-Code scanning tools, triage findings, reduce false positives, and provide actionable remediation guidance.
• Design and implement security integrations across CI/CD pipelines, source control, IDEs, and ticketing systems, including policy gates and break-the-build criteria.
• Partner with development teams on secure coding, vulnerability remediation, and developer enablement throughout the SDLC.
• Assess software supply chain controls, including SBOMs, dependency and container scanning, artifact signing, and pipeline security.
• Perform threat modeling and security architecture reviews for cloud-native, microservice, container, and Infrastructure-as-Code environments.
• Support AI-enabled and agentic application security, AppSec program maturity, client-ready reporting, and presentations to technical and executive audiences.

Requirements

• 1–3+ years of experience in Application Security, DevSecOps, or software development with a security focus.
• Hands-on experience with SAST, DAST, and SCA tools and CI/CD integrations such as Azure DevOps, GitHub Actions, GitLab CI, Jenkins, or Bamboo.
• Proficiency with Burp Suite Pro and strong knowledge of the OWASP Top 10 and OWASP API Security Top 10.
• Experience with secure development lifecycles, vulnerability remediation, source code review, cloud platforms, containers, and Git-based workflows.
• Ability to review code in languages including JavaScript/TypeScript, Python, Java, C#, Go, PHP, or C/C++.
• Applicants must be authorized to work for any employer in the United States; visa sponsorship is not available.

Nice to have

• Experience with Invicti, Checkmarx, Snyk, Veracode, Black Duck, Semgrep, or GitHub Advanced Security.
• Experience building agentic AI security workflows or automation with Python, Bash, or PowerShell.
• Knowledge of SBOM, SLSA, Sigstore, IaC and container security scanning, STRIDE, OWASP SAMM, BSIMM, or NIST SSDF.
• Relevant industry certifications or a degree in Computer Science, Information Security, or a related field.

Culture & Benefits

• Primarily remote workforce with collaboration, mentorship, and knowledge sharing.
• Medical, dental, HSA, retirement plan, and flexible time off benefits.
• Corporate holidays, home internet and mobile phone allowance, and pet benefit options.
• Work supports commercial and government cybersecurity clients, with possible travel or onsite work for certain federal positions.

Hiring process

• HR screen requests are scheduled through Zoom Scheduler.
• Application updates are sent through Greenhouse; candidates should monitor their spam folder.