Security Engineer (AI)

Location: Burlingame, California, United States; hybrid workplace

Company

hirify.global develops AI-enabled robotics and software for manufacturing data center infrastructure, including servers for hyperscalers, neoclouds, and OEMs.

What you will do

• Execute information security operations across corporate IT, platform, and product environments in partnership with the Global IT Director.
• Maintain the ISO 27001:2022 certification through evidence collection, internal audits, corrective actions, and support for surveillance and recertification audits.
• Complete customer security questionnaires, support customer audits, and track contractual security requirements with Legal and Sales.
• Embed application security into the SDLC through threat modeling, secure code review guidance, and SAST/DAST/SCA tooling.
• Run vulnerability management, coordinate penetration tests, and drive findings and remediation to closure.
• Support infrastructure security, incident response, identity governance, vendor risk assessments, policies, awareness training, reporting, and future compliance initiatives such as SOC 2 Type II.

Requirements

• 5+ years of experience in security engineering, IT security, application security, or a closely related role.
• Experience maintaining an existing ISO 27001 ISMS, including evidence collection, internal audits, and surveillance or recertification audits; building an ISMS from scratch is not required.
• Working knowledge of OWASP Top 10 and secure SDLC practices, with hands-on experience using SAST, DAST, and SCA tools such as Snyk, Semgrep, Checkmarx, or Burp Suite.
• Proficiency in a scripting language such as Python, with a strong inclination toward infrastructure as code using tools such as Terraform or Ansible.
• Familiarity with GRC platforms, EDR or managed SOC platforms, and security operations and detection/response workflows.
• Basic cloud security literacy in AWS, Azure, and/or GCP, including IAM, network security groups, encryption, logging, and monitoring.
• Ability to complete customer security questionnaires and support customer-facing security conversations.
• Excellent written and verbal English communication skills with IT, Platform Engineering, Software Development, and Delivery stakeholders.
• Ability to work as an execution-focused practitioner in a lean IT organization and partner closely with the Global IT Director, Infrastructure Engineer, Platform Engineering, and staff IT engineers.

Nice to have

• Security certifications such as Security+, GSEC, or CCSP.
• Experience in manufacturing, industrial, IoT, or OT/ICS security environments.
• Exposure to penetration testing engagements, either hands-on or coordinating with external testers.
• Familiarity with Zero Trust architecture principles.
• English language proficiency.

Culture & Benefits

• Hybrid work in Burlingame, California.
• Opportunity to work on AI and data center infrastructure manufacturing.
• Collaboration with IT, platform engineering, software development, infrastructure, legal, sales, and delivery stakeholders.
• Focus on improving manufacturing quality, flexibility, and scale through software, intelligent automation, and data.