Staff Application Security Engineer (AI)

Location: Remote within the United States

Salary: $180,000–$236,250 (US Tier 1), $162,000–$212,625 (US Tier 2), or $144,000–$189,000 (US Tier 3), plus equity

Company

hirify.global provides a platform spanning Cloud and Open Source products, supporting customer execution environments across multiple clouds.

What you will do

• Collaborate with product and engineering teams to integrate security principles into product design and architecture.
• Lead complex threat modeling and risk assessments across the full product surface.
• Drive security strategy, influence architecture, and set direction across multiple teams or the wider organization.
• Manage the secure development pipeline, including code security and third-party library supply chain security.
• Translate emerging standards and guidance, including OWASP Top 10 for LLMs and MCP security specifications, into internal policy.
• Own responsibly disclosed vulnerabilities in Cloud and Open Source products and participate in the on-call rotation.

Requirements

• Bachelor’s degree in Computer Science, Cybersecurity, or a related field, or equivalent experience.
• 7+ years of experience in application security, product security, or a related role.
• Proven partnership with engineering teams, bringing security expertise into planning and development.
• Ability to write production-quality code in at least one programming language, with development experience beyond simple scripting.
• Knowledge of encryption, authentication, and secure communication protocols.
• Familiarity with SAST, DAST, and penetration testing frameworks.
• Deep understanding of application architecture and design principles, with the ability to identify vulnerabilities across multiple programming languages.
• Excellent communication skills and ability to explain complex security concepts to non-technical stakeholders.
• Experience with Kubernetes security posture management and auditing, including workload hardening, RBAC design, and admission control.
• Demonstrated experience with multi-tenant security architecture, including data plane isolation, control plane hardening, and cross-tenant data leakage prevention.

Nice to have

• Distributed computing and related vulnerability experience.
• Familiarity with Go.
• Experience running a Security Champions program.
• Open Source automation or automation projects.
• Expertise in other areas of security.
• Security conference talks or published research.

Culture & Benefits

• Remote-first work model with most roles remote in-country; some roles are remote within a region and a few teams have in-office hubs.
• Occasional travel for onboarding and team gatherings.
• Competitive benefits and equity.
• Flexible time off.
• Support for learning, wellness, and home-office needs.