AI Security Engineer

Location: Manila, Philippines; hybrid work with in-person meetings as needed

Company

hirify.global fosters a collaborative and inclusive workplace focused on empowering associates to accomplish more.

What you will do

• Build AI-assisted security tools, services, workflows, and API integrations for secure design, threat identification, control mapping, and remediation.
• Embed security guidance into specifications, technical designs, source control, pull requests, CI/CD pipelines, infrastructure-as-code, and developer platforms.
• Analyze requirements, architecture decisions, data flows, application designs, cloud configurations, and code changes for security concerns.
• Maintain reusable security requirements, patterns, review criteria, remediation guidance, and grounded knowledge linked to policies and controls.
• Turn validated prototypes into maintainable security capabilities, develop secure AI-assisted development patterns, and automate repetitive security activities.
• Document risks, business impact, remediation options, trade-offs, and residual risk; gather feedback and escalate matters requiring specialist review or formal risk decisions.

Requirements

• Bachelor’s degree in computer science, cybersecurity, information technology, software engineering, or a related field; equivalent practical experience is also considered.
• Hands-on experience in security engineering, application security, cloud security, platform engineering, developer tooling, or software engineering.
• Coding or scripting experience with Python, TypeScript/JavaScript, or a comparable language.
• Experience with APIs, Git-based workflows, automation, CI/CD pipelines, cloud services, or developer platforms.
• Understanding of secure software development, including identity and access management, application and API security, secrets management, data protection, cloud security, logging, and vulnerability management.
• Familiarity with generative AI, AI-assisted development, agent-based workflows, knowledge grounding, or evaluating AI-generated output.
• Ability to translate security requirements into clear, practical engineering guidance.
• Strong analytical, written, and verbal communication skills, including the ability to explain security concepts to technical and non-technical audiences.
• Sound judgment, collaboration skills, priority management in a global, matrixed environment, and commitment to continuous learning in AI, cybersecurity, and software engineering practices.

Nice to have

• Experience building internal developer tools, security automation, or AI-assisted capabilities.
• Experience with cloud-native applications, infrastructure-as-code, containers, microservices, APIs, or event-driven architectures.
• Familiarity with threat modeling, secure design patterns, architecture decision records, control mapping, or policy-as-code.
• Familiarity with NIST, ISO 27001, CIS Controls, OWASP, CSA, or cloud-provider security practices.
• Experience in financial services or another regulated environment.
• Familiarity with AI security risks, including prompt injection, sensitive-data exposure, insecure tool use, excessive permissions, source provenance, and output reliability.
• Relevant certifications such as Security+, CISSP, CCSP, CCSK, CSSLP, CISA, CRISC, or comparable qualifications.

Culture & Benefits

• Hybrid work with in-person collaboration and learning as needed.
• Collaborative, engaging, and inclusive workplace.
• Environment designed to support authenticity, safety, understanding, and respect for diverse perspectives.
• Recruiting may use AI-based tools to support application review, with human review included in employment decisions.