Staff Application Security Engineer (AI)

Location: United States

Salary: $145,000–$207,000 USD per year, depending on location, job family, background, skills, and experience.

Company

hirify.global provides a cloud-native SaaS Context Intelligence Platform that harmonizes, unifies, and governs enterprise data in real time for applications, users, and AI agents. The platform serves major brands across life sciences, financial services, healthcare, and technology.

What you will do

• Define and drive application and product security architecture, strategy, standards, and roadmap across the platform and services.
• Embed security throughout the SDLC, establish secure coding practices, and drive shift-left tooling and remediation.
• Design CI/CD security controls and operationalize SAST, SCA, DAST, secrets scanning, and secure deployment checks.
• Lead threat modeling, architecture reviews, technical risk assessments, vulnerability validation, and risk-based remediation prioritization.
• Secure APIs and AI or multi-agent systems, including authentication, authorization, data protection, tenant isolation, prompt and output validation, MCP tool authorization, and abuse prevention.
• Perform and oversee application, API, and AI-agent penetration testing; mentor engineers and collaborate with Engineering, DevOps, QA, Product, and Release Management.

Requirements

• 8+ years of experience in application security or software development, including significant experience in a cloud-native or SaaS environment.
• Technical leadership as a senior individual contributor, including setting standards, driving cross-team initiatives, and influencing architecture without direct authority.
• Hands-on secure coding experience, modern application development experience, and proficiency leading secure code reviews.
• Strong understanding of cloud well-architected frameworks, application development and deployment workflows, OWASP Top 10, OWASP API Top 10, and API security principles.
• Experience integrating security into CI/CD and release management processes, including Jenkins, ArgoCD, or similar tools.
• Experience integrating SAST, SCA, and DAST testing into CI/CD pipelines.
• Experience with AI security concepts including guardrails, prompt and output validation, data protection, and MCP security.
• Hands-on experience with Java, Java Spring Boot, JavaScript, Node.js, C#, modern UI frameworks, microservices, and cloud-native or serverless architectures.
• Experience with AWS, GCP, and/or Azure, container security, Kubernetes, Burp Suite Pro, and modern application security platforms; Wiz is preferred and other AppSec tools are acceptable.
• Strong communication and presentation skills, ability to educate and drive risk-based consensus, and a history of independently driving technical initiatives in global, distributed teams.

Nice to have

• Experience securing LLM applications and multi-agent systems, including NeMo Guardrails, AWS Bedrock Guardrails, and MCP gateway or tool security.
• Experience building or operationalizing AppSec automation and orchestration, including SAST, SCA, secrets scanning, AI analysis, and DefectDojo integration.
• Experience with Wiz Code, Veracode, Checkmarx, Cycode, SonarQube, or other commercial AppSec and SCA platforms.
• Experience developing and operationalizing vulnerability management or product security programs at scale.
• Experience with SOC 2, HITRUST, ISO 27001, audit support, or customer-assurance processes.
• Experience applying ML or AI techniques to security detection, anomaly identification, and automated risk prioritization.
• Relevant security and cloud certifications.

Culture & Benefits

• Flexible work arrangements supported by a distributed-workforce culture.
• Work with a collaborative organization guided by Customer First, Better Together, Simplify and Share, Own It, and Always Better Than Yesterday values.
• Work on cloud-native SaaS technology focused on connected data, enterprise AI, and digital transformation.
• Equal opportunity workplace with reasonable accommodation for applicants with disabilities.