Staff Security Engineer (Infrastructure Security)

Location: Remote - Americas

Company

hirify.global is a commerce platform helping entrepreneurs and enterprises build and scale businesses, serving millions of merchants in 175 countries.

What you will do

• Set direction for cloud and infrastructure security across production runtimes, identify material security gaps, and drive measurable risk reduction.
• Design, implement, operate, and validate infrastructure security controls in production, including reusable self-service patterns, tooling, and documentation.
• Provide architectural guidance and security reviews, prioritize remediation, and lead complex security initiatives from proposal through adoption.
• Lead threat hunts, tabletop exercises, post-incident reviews, and research into emerging technologies and threats.
• Maintain documentation for controls, architecture decisions, incident learnings, and playbooks.
• Communicate security tradeoffs to technical partners, non-technical stakeholders, and senior leadership, while mentoring engineers through pairing, code reviews, and knowledge sharing.

Requirements

• Experience as a technical security leader in a large-scale, complex, cloud-based environment, using analytical and data-literacy skills to shape a security roadmap.
• Deep expertise securing cloud infrastructure at scale, including infrastructure as code, identity and access management, and Kubernetes environments.
• Experience designing and operating infrastructure security controls through implementation and production adoption, with the ability to measure their effectiveness.
• Experience building and operating production security tooling, fluency in at least one programming language, and ability to work with infrastructure as code, cloud APIs, and Kubernetes configuration.
• Ability to assess attack surfaces from an adversarial perspective, build detections proactively, and close security gaps before exploitation.
• Track record of independently delivering complex security initiatives, influencing senior stakeholders, and aligning security roadmaps with broader company priorities.
• Ability to collaborate across teams during high-stress situations, manage competing priorities, and use sound judgment to establish order.
• Ability to use AI for cloud-risk analysis, infrastructure-as-code review, security-control design, and scalable infrastructure-security solutions while validating its outputs.
• Strong accountability for the quality, adoption, and outcomes of security controls and initiatives, including surfacing risks early and driving them to resolution.

Nice to have

• Familiarity with application-security practices and security threats related to e-commerce.

Culture & Benefits

• Digital-first daily work in a remote environment.
• Independence, professional and personal growth, resilience, resourcefulness, and comfort with ambiguity and change are valued.
• Critical thinking, constructive disagreement, and accountability are encouraged.
• AI-enabled tools may be used to screen, select, and assess applications, with outputs reviewed and validated by the recruitment team.