Security Engineer (AI Security)

Location: Remote in Canada; Toronto, Ontario, Canada

Salary: C$105,000–C$130,000 base salary annually, with potential variable compensation.

Company

hirify.global provides SaaS solutions for sales performance and revenue performance management.

What you will do

• Own the deployment, configuration, testing, monitoring, maintenance, documentation and improvement of assigned security tools, including SIEM, EDR/CNAPP, DLP, ZTNA, WAF, CASB, secure web gateway, email security and vulnerability-scanning platforms.
• Lead medium-sized security initiatives from requirements gathering through technical selection, testing, piloting and implementation.
• Triage and investigate security events, assess severity, apply incident-response playbooks, escalate high-impact incidents and document root causes and lessons learned.
• Perform baseline reviews, vulnerability scanning, pentest validation and AI red-team testing; prioritise findings and drive remediation through closure.
• Conduct security risk assessments, STRIDE threat modeling and vendor risk assessments for internal projects, product enhancements, vendors, productivity tools and AI-enabled initiatives.
• Improve security processes and controls, automate vulnerability workflows, integrate security checks into CI/CD pipelines and share current threat and best-practice knowledge.

Requirements

• 5+ years of experience in Information Security, Security Engineering or Security Operations, with a Bachelor's degree in Information Security, Computer Science, Computer Engineering, Technology Management or a related field, or equivalent work experience.
• At least one information security certification, such as CISSP, CISA, CCSP or equivalent.
• Full working knowledge of securing cloud environments, operating systems, networks, databases and applications.
• Hands-on experience operating public cloud platforms such as AWS or IBM Cloud.
• Hands-on experience owning security tools including SIEM, WAF, DLP, EDR and infrastructure or application vulnerability scanners.
• Understanding of NIST CSF and ISO 27001/27002, plus experience supporting controls aligned to SOC 1, SOC 2, PCI and HIPAA.
• Ability to break down problems, select an approach and make sound decisions with incomplete information.
• Strong written and verbal communication skills, including explaining risk to technical and non-technical stakeholders.
• High accountability, a continuous-learning mindset and fluent English.

Nice to have

• Experience integrating scanning, alerting, ticket creation or gating security checks into CI/CD pipelines.
• Security automation with Python, PowerShell or Bash.
• Hands-on experience with OneTrust workflows, evidence management and assessment reporting.
• Experience conducting risk assessments using the STRIDE methodology.

Culture & Benefits

• Remote work opportunity in Canada.
• Opportunity to build solutions used by global customers and collaborate with Cloud Operations, Engineering, IT and business teams.
• Variable compensation may be available in addition to the base salary.
• Equal-opportunity workplace committed to diversity and accommodation during the hiring process.

Hiring process

• AI tools assist with candidate screening and assessment while supporting human decision-making.
• Successful candidates are expected to ramp up during the first 1–3 months, own a security service by months 4–6 and demonstrate measurable impact from month 7 onward.