Senior Security Engineer

Location: Boston, Massachusetts, United States or Vancouver, British Columbia, Canada. Offices are also located in Vancouver, Washington, United States; selected positions may be fully remote.

Salary: $125,000–$205,000 USD for candidates located in the United States; $110,000–$160,000 CAD for candidates located in Canada.

Company

hirify.global is an AI-powered influencer marketing platform that combines creator relationships, proprietary data, and expert guidance to help brands plan and execute measurable campaigns.

What you will do

• Assess and improve security across applications, infrastructure, cloud environments, corporate systems, vendor tooling, and business workflows.
• Define scalable security standards and implement practical, automated, auditable controls supporting SOC 2 readiness.
• Build and maintain internal security tools, automation, and services for secure development, compliance, vulnerability management, and operational visibility.
• Integrate secure build and deployment patterns, security scanning, dependency management, container scanning, and secret management into CI/CD pipelines.
• Lead application, cloud, infrastructure, and corporate security improvements including threat modeling, access reviews, hardening, monitoring, and Infrastructure-as-Code security scanning.
• Improve logging, alerting, detection engineering, incident response readiness, security guidance, and cross-functional remediation.

Requirements

• 5–7+ years of experience as a Security Engineer or Software Engineer with a strong security focus.
• Ability to build and operate production-quality software, automation, and internal tooling.
• Strong understanding of application security, infrastructure security, cloud security, secure CI/CD practices, and corporate security controls.
• Hands-on experience with vulnerability management, secure software development, threat modeling, remediation workflows, and operational security improvements.
• Experience with OWASP, NIST, CIS Controls, SOC 2, and ISO 27001, with the ability to apply them in production and business environments.
• Experience supporting SOC 2 compliance through practical, automated, and auditable controls.
• Familiarity with AWS Security Hub, Azure Security Center, or GCP Security Command Center.
• Experience with SIEM/SOAR tools, logging and monitoring platforms, detection workflows, and practical incident response processes.
• Experience with Infrastructure-as-Code security scanning for Terraform or CloudFormation, plus familiarity with C#, modern backend systems, cloud-native architecture, and SaaS business tooling.
• Ability to explain complex security concepts clearly to technical and non-technical audiences and collaborate with engineering, IT, compliance, and business teams.

Culture & Benefits

• Inclusive, supportive, and accessibility-conscious workplace focused on culture add.
• Impact-driven, accountable, curious, collaborative, resilient, and customer-centric working style.
• Permanent team members are eligible for various benefits plans.
• Compensation is benchmarked by role, level, scope, and geographic location and reviewed bi-annually.
• Fully remote work may be available for selected positions.