Staff Security Engineer, Security Operations (AI)

Location: Roseville, CA headquarters; San Francisco, CA; Austin, TX; Seattle, WA; New York; West Palm Beach, FL; or Remote, US. Hybrid, full-time role.

Salary: $167,400–$212,500 per year.

Company

hirify.global develops financing and software products for sustainable solutions such as solar, batteries, energy-efficient HVAC, heat pumps, roofing, and windows. Its AI-powered applications and developer tools support customer communication, business intelligence, payments, and operations.

What you will do

• Design, test, and tune detections across cloud, identity, endpoint, and email telemetry using detection-as-code mapped to MITRE ATT&CK.
• Manage security logging, SIEM, alerting pipelines, and monitoring of AI tools, agents, MCP integrations, and API keys.
• Lead investigation, containment, eradication, and recovery for security incidents, including incident coordination and regulatory notifications.
• Maintain incident response plans, playbooks, and runbooks; conduct tabletop exercises and post-incident reviews.
• Deploy and manage cloud security monitoring, WAF, DDoS protection, IDS, EDR, and email security tooling, including CrowdStrike.
• Build AI agents and automation for alert triage, enrichment, investigation, and response; mentor security and partner engineering teams.

Requirements

• In-depth knowledge of Amazon AWS security configuration, logging, and tooling, including CloudTrail, GuardDuty, and Security Hub.
• Hands-on detection engineering experience with SIEM query languages and detection-as-code.
• Hands-on incident response experience, including log analysis and host and cloud investigation.
• Familiarity with the MITRE ATT&CK framework, OWASP Top 10, and network and web protocols including TCP/IP, DNS, HTTP, HTTPS, and TLS.
• Experience with EDR platforms or the ability to quickly ramp up; CrowdStrike Falcon experience is preferred.
• Experience with email security, including phishing, BEC, DMARC, SPF, and DKIM, or the ability to quickly ramp up.
• Experience building automation in Python or a similar language, and building or integrating LLM-based agents and workflows.
• Understanding of AI-specific risks such as prompt injection, data leakage, and excessive agent permissions.
• Experience working in a SOC 2, PCI-DSS, or ISO control environment; ability to assess requirements and alignment using business, technical, and process expertise.
• Strong verbal, written, ticketing, and messaging communication skills; ability to prioritize and deliver multiple tasks independently in a fast-paced environment.

Nice to have

• GCIH, GCFA, GCDA, CCSP, CISSP, CrowdStrike, or comparable certifications.

Culture & Benefits

• Collaborative work culture with cross-functional cooperation across software engineering, infrastructure, IT, compliance, legal, and leadership.
• Opportunity to help build the security team and mature security operations capabilities.
• Role includes mentoring security and partner engineering teams.