Staff Product Security Engineer (AI Security)

Location: Remote - US

Company

hirify.global builds an AI-driven software security platform using a code context graph to identify exploitable vulnerabilities and provide fixes that preserve application functionality.

What you will do

• Set and execute the security strategy for the hirify.global platform in partnership with the Head of Security & IT.
• Lead security work across supply chain security, first-party code scanning, runtime monitoring, AI agent hardening, threat modeling, and secure design reviews.
• Validate, prioritize, and remediate application security findings at scale, and build internal processes that prevent insecure code from being merged.
• Deploy security agents and build automation to improve the quality and scale of security activities across engineering.
• Partner with Product and Engineering on roadmap planning, designs, mocks, implementation feedback, and customer-facing security problems.
• Share effective security practices with customers, prospects, and the broader security community.

Requirements

• 10+ years of experience in application or product security, including staff- or principal-level technical leadership.
• A track record of building security tooling and automation that operates at scale across an engineering organization, including measuring its effectiveness.
• Experience influencing a product or platform roadmap and turning internal security work into solutions adopted by other teams or customers.
• Hands-on experience applying LLMs and agents to security problems, including building harnesses, comparing tools, or measuring failure modes.
• Well-reasoned expertise in finding, validating, and fixing vulnerabilities in existing code and preventing insecure code from being merged.
• Deep threat modeling and secure architecture skills.
• Ability to set direction and influence senior engineering, product, and customer stakeholders without formal authority.
• Ability to investigate issues, identify root causes, and drive remediation rather than only reporting findings.
• Comfort building from scratch in an ambiguous, fast-moving environment and setting priorities without an established playbook.

Nice to have

• Experience securing build systems and CI/CD at scale, especially Bazel monorepos.
• Security research experience in vulnerability research, program analysis, or static analysis tooling.
• Conference talks, publications, or open-source work in application security.

Culture & Benefits

• Remote work from the United States.
• Customer-focused environment built around ownership, purposeful execution, data-driven decisions, and continuous learning.
• Culture of candid, kind debate, celebrating wins, learning from misses, and simplifying complex problems.
• Inclusive workplace committed to diversity and equal opportunity.