Senior Software Engineer, Security (AI)

Location: New York, New York, United States; requires working from the office four days a week.

Base salary: $160,000–$200,000 per year, depending on skills, relevant experience, interviews, leveling, and geography.

Company

hirify.global is an AI-driven commercial real estate technology platform providing leasing, market intelligence, workflow, and data products for real estate professionals, investors, and customers.

What you will do

• Own the SAST/DAST program, including selecting, tuning, and integrating static and dynamic analysis tools into CI/CD pipelines.
• Identify and build AI- and LLM-driven agents for dependency and supply-chain analysis, code review, runtime behavior analysis, detection, and triage.
• Lead security incidents end-to-end, including investigation, root-cause analysis, remediation, escalation, and deep-dive post-mortems.
• Lead vulnerability management and threat modeling across internal and external environments, prioritizing real-world exploitability and business impact.
• Partner with legal, IT, leadership, and product teams on SOC 2 Type II, ISO 27001, InfoSec, and customer security requirements.
• Mentor engineers and influence secure coding, threat modeling, and security-first development practices.

Requirements

• 8+ years of experience in Security Engineering, AppSec, Vulnerability Research, or Incident Response, including at least 2 years in a Senior-level capacity driving cross-team initiatives.
• Hands-on experience with secrets management such as Vault, AWS KMS, AWS Secrets Manager, or similar tools.
• Experience with secure API design, including authentication and authorization, input validation, and rate limiting.
• Experience with system hardening standards such as CIS Benchmarks and SELinux/AppArmor.
• Ability to write in a systems-level language such as C, C++, Rust, Go, or ASM and critically read code in languages including Ruby, Node.js, Java, TypeScript, or Python.
• Ability to investigate vulnerabilities and incidents from initial exposure through root cause and full closure; familiarity with disassembly and shared-object analysis when required.
• Comfort operating within SOC 2, ISO 27001, or similar compliance frameworks and translating control requirements into practical engineering work.
• Curiosity about security research, including following Arxiv, ACM, newly published research, emerging attack techniques, and defensive tooling.
• Ability to plan and execute autonomously, identify unassigned security gaps, and work with the team lead to prioritize them.

Culture & Benefits

• Executive coaching, training, and career development programs.
• Health, dental, and vision benefits, pre-tax commuter benefits, and a 401(k) plan.
• Education stipend, wellness events, clubs, quarterly happy hours, and team lunches.
• Open-floor-plan workplace supporting cross-functional collaboration.
• Equity packages, flexible PTO, generous family leave, diversity initiatives, and work-life balance support.