Security Engineer (AI)

Location: Hybrid in New York City; in-person Monday–Wednesday and remote Thursday–Friday.

Base salary: $160,000–$220,000 per year, based on experience.

Company

hirify.global is building an AI-native primary intelligence platform for enterprises, investment firms, asset managers, hedge funds, private equity firms, credit investors, and venture capital firms. The platform automates expert research through study design, expert recruitment, AI-moderated interviews, and insight synthesis.

What you will do

• Build and scale the company’s security program as the first dedicated security engineer.
• Harden cloud environments and build logging, monitoring, detection, secrets management, encryption, and other security controls.
• Remediate penetration-test findings, contribute production code, and review security implications of new features and architecture changes.
• Lead ISO 27001 certification from scoping and risk assessment through control implementation, evidence collection, and certification audit.
• Define security architecture and roadmap, lead incident response, and partner with Compliance and Legal on policies, customer security reviews, and the broader compliance program.
• Protect confidential expert interviews and customer research while securing an AI system that conducts thousands of interviews each month.

Requirements

• 4+ years of security engineering experience, including hands-on compliance work; startup or high-growth SaaS experience securing cloud infrastructure and helping build a compliance program is required.
• Strong cloud and infrastructure security skills in AWS or GCP, including IAM, network security, logging and monitoring, secrets management, and encryption; ability to read and write infrastructure-as-code.
• Ability to contribute to a production codebase and address issues identified in penetration tests.
• Experience taking a company through ISO 27001 certification, including ISMS scoping, risk assessments, Statement of Applicability, control implementation, and audit management.
• Fluency with AI models and agentic coding tools; understanding of LLM security and data-governance risks, including prompt injection and data leakage.
• Ability to work independently, communicate proactively, make architecture decisions, and defend them in code review.

Nice to have

• SOC 2 Type II experience and familiarity with ISMS scoping, risk assessments, or the Statement of Applicability.
• Experience with SIEM, EDR, CSPM, vulnerability scanning, container image scanning, and compliance automation platforms such as Vanta or Drata.
• Experience building reusable security guardrails or libraries.
• Experience securing LLM-based applications and agentic systems, including red-teaming for prompt injection, data exfiltration, and tool misuse.
• Experience building technical controls for data segregation and access, particularly in financial services or expert networks involving MNPI and client confidentiality.
• Security certifications such as ISO 27001 Lead Implementer, ISO 27001 Lead Auditor, CCSP, AWS Security Specialty, or OSCP.
• Background in financial services or market research.

Culture & Benefits

• High-velocity, early-stage environment with significant ownership and agency.
• High standards for quality and impact, with a builder’s mindset focused on creating scalable processes, playbooks, and systems.
• Collaborative environment with an emphasis on shared ambition and enjoyment at work.
• Meaningful early-stage equity grant tied to company growth.
• Health coverage, flexible paid time off, and paid holidays.