Вакансия из Hirify Global, списка международных tech-компаний Для мэтча и отклика нужен Plus
Пожаловаться
Зарплата и рынок
ЗП не указана
На похожих ролях по рынку
$65к$69кмедиана$94к
9 в выборке
На СНГ рынке: $5.1к/мес ($2.9к - $7.9к)
86
Хорошая вакансия
развернуть
Понятная зона ответственности и конкретные цели на первый год делают вакансию привлекательной, но работа в небольшой команде и срочная доступность в первые месяцы добавляют нагрузки.
Кликните для подробной информации
Срочные дежурстваПонятная зона ответственностиСовременный стекБезопасность ИИПривязка к Кипру
Оценка от Hirify AI
Мэтч & Сопровод
Для мэтча с этой вакансией нужен Plus
Подключить Plus
Описание вакансии
Текст:
Hirify AI/Оригинал
TL;DR
Senior Security Engineer (AI): Protecting student data across cloud infrastructure, web applications, company systems, and engineering workflows with an accent on AWS security, identity controls, AI-assisted automation, and compliance readiness. Focus on mapping attack surfaces, reducing high-impact risks, building detection and incident-response capabilities, and automating SOC 2 and ISO 27001 evidence collection.
Location: Hybrid and mostly remote; hired from Cyprus, with at least six months a year required in Cyprus and access to coworking spaces in Larnaca and/or Limassol. The role is also listed in Beirut, Lebanon.
Company
hirify.global builds software that helps students learn mathematics and supports schools trusted with student data.
What you will do
Map the attack surface and sensitive data, prioritize risks, and work with engineers to address issues in application code, cloud configuration, and the build pipeline.
Build AI-assisted workflows for security triage, code review, advisory analysis, and evidence collection, with controls for data, permissions, prompt injection, and leakage.
Strengthen SSO, MFA, privileged access, onboarding, offboarding, and device-management coverage.
Improve monitoring, respond to emerging threats, and build incident-response playbooks and an on-call rotation.
Run a SOC 2 and ISO 27001 gap assessment, create a practical roadmap, and automate compliance evidence collection.
Support customer trust by answering school and district security questionnaires and maintaining accurate security claims.
Requirements
Solid experience in cloud and web application security, ideally with AWS and Python; ability to read unfamiliar code, reason about permissions, and write automation.
AI-native working style, including daily use of AI tools, judgment about when to trust them, and understanding of prompt injection and data-leakage risks.
Good judgment about urgency and prioritization, with clear communication to engineers and leadership.
Ability to work independently in a small team.
Ability to work at least six months a year from Cyprus.
For the first six months, availability at short notice for urgent security issues; afterward, participation in an on-call rotation.
Ability to provide a CV and two brief examples covering a resolved security problem and a tool, process, or AI-assisted workflow that improved security effectiveness.
Nice to have
Experience with SOC 2, ISO 27001, or a similar framework.
Experience with device management, detection, or incident response.
Experience as the first security hire at an organization.
Culture & Benefits
Mission-driven work focused on mathematics education for students and teachers.
Lean, high-trust environment with significant individual ownership and a startup culture.
Flexible remote work, including flexibility to work while travelling, subject to the Cyprus presence requirement.
Yearly stipend for training and professional development.
2.5 paid volunteer days annually.
MacBook Pro, required peripherals, and competitive salary.
Hiring process
Submit a CV and two brief examples describing the reasoning and results; sanitized descriptions are accepted.
Assessment focuses on demonstrated ability rather than a specific degree, certification, or previous employer.
Будьте осторожны: если работодатель просит войти в их систему, используя iCloud/Google, прислать код/пароль, запустить код/ПО, не делайте этого - это мошенники. Обязательно жмите "Пожаловаться" или пишите в поддержку. Подробнее в гайде →