Security Engineer (Cloud Security)

Location: On-site in New York City, United States. U.S. citizenship is required because the role includes privileged access to a FedRAMP environment.

Salary: $200,000–$300,000 per year, plus equity.

Company

hirify.global is building an operating system for how businesses find public-sector buyers, win government work, and get paid.

What you will do

• Harden AWS and GCP environments across identity and access management, networking, encryption, secrets management, and container security.
• Manage vulnerabilities across applications, dependencies, containers, and cloud infrastructure, from scanning and prioritization through remediation verification.
• Maintain security controls, remediation plans, audit evidence, continuous monitoring, and customer security reviews, including FedRAMP-related work.
• Improve deployment pipelines, monitoring, alerting, backups, recovery procedures, and production reliability.
• Contribute to architecture and code reviews, CI/CD security checks, authentication and authorization controls, tenant isolation, and API security.
• Build automation for vulnerability triage, evidence collection, deployment checks, troubleshooting, detection, and incident response, including experimentation with AI tools and agents.

Requirements

• 5+ years of relevant experience in security, infrastructure, platform engineering, or SRE with meaningful production security responsibility.
• Strong cloud infrastructure experience, ideally across AWS and GCP, including Kubernetes, containers, IAM, networking, and storage.
• Practical vulnerability management experience covering scanning, triage, remediation, and verification.
• Knowledge of security and compliance practices, access controls, secure development, control implementation, and assessment evidence.
• Programming skills in any language, with the ability to debug application code, make targeted fixes, and build tested tools.
• Experience with infrastructure as code and CI/CD using Terraform, Helm, Jenkins, or comparable tools, plus clear risk communication and follow-through.

Nice to have

• Experience with government or regulated environments, including FedRAMP, CMMC, NIST frameworks, or SOC 2.
• Experience working with security providers, auditors, third-party assessors, Wiz, CrowdStrike, Vanta, or similar tools.
• PostgreSQL and Python backend development experience.
• Container hardening, software supply chain security, or security for AI applications, agents, and integrations.

Culture & Benefits

• Customer-centric, fast-moving work focused on helping businesses succeed in government partnerships.
• Medical, dental, and vision insurance, plus early-stage equity.
• Company-provided lunch in the office every day.
• Complimentary Chelsea Piers Fitness gym membership and unlimited PTO.
• Regular offsites in New York City and global locations.

Hiring process

• CV and statement of exceptional work review, followed by a 30-minute interview.
• Programming challenge covering LeetCode and SQL.
• System design, live Java/Kotlin coding, and product-thinking or past-work interviews, conducted via Google Meet.