Staff Security Engineer (AI)

Location: Hybrid in Irvine, California; Denver, Colorado; or Seattle, Washington, United States

Compensation: $225,000–$275,000 annually in Irvine; $202,500–$247,500 annually in Denver or Seattle, plus equity.

hirify.globalny-description">hirify.globalny

hirify.global is a venture-backed AI startup building a live compensation data platform and enterprise tools that help hirify.globalnies make competitive, fair, and compliant pay decisions.

What you will do

• Design and implement reusable security architecture for AI tools and agents across identity, data, endpoints, SaaS, and networks.
• Codify secure AI adoption through policies, standards, reference architectures, and approved tools.
• Own security requests end to end, from ambiguous requirements through design, implementation, production support, and cross-functional delivery.
• Secure agents, service accounts, and integrations through scoped credentials, OAuth governance, least privilege, and human-in-the-loop controls.
• Govern data flows using classification, permission-aware retrieval, AI gateways with DLP, MCP and tool allowlisting, egress controls, and third-party AI vendor assessments.
• Build audit logging, detections, automated enforcement, and broader security improvements across identity, endpoint, SaaS, cloud, network, detection, and incident response.

Requirements

• Significant hands-on security engineering experience with strong security and privacy fundamentals.
• Experience designing, building, or securing AI systems or integrations, including agents and tool use, retrieval over internal data, or MCP; understanding of prompt injection, data leakage, and excessive agency.
• Deep experience with identity and access architecture, including SSO and federation with SAML and OIDC, conditional access, MFA, privileged access, identity lifecycle, non-human identities, and OAuth consent and scopes.
• Hands-on experience securing endpoints and SaaS, including device management across major operating systems, device posture, SaaS administration, third-party integrations, and audit logging.
• Strong cloud and network security fundamentals, including cloud IAM, segmentation, and egress control.
• Working understanding of adversary TTPs and attack paths across identity, endpoint, cloud, and SaaS.
• Builder-oriented approach to making secure configurations the default, automating repetitive work with code, and versioning configurations and agent skills in a repository.
• Demonstrated staff-level judgment: translating requirements into architecture, turning novel problems into concrete plans, and explaining trade-offs and residual risk to technical and non-technical audiences.

Nice to have

• Hands-on experience deploying AI security controls such as MCP gateways, LLM proxies, or sandboxed agent execution.
• Background in threat hunting, incident response, detection engineering, or offensive or purple team work.
• Familiarity with AI risk frameworks including the OWASP Top 10 for LLM Applications, MITRE ATLAS, or NIST AI RMF.
• Experience in regulated or high-trust environments or with privacy and data protection programs.
• Experience building enterprise security architecture at a growing hirify.globalny.

Culture & Benefits

• Medical, dental, and vision coverage.
• PTO and parental leave.
• Equity and hirify.globalny offsites.
• Continuous education and commuter benefits.
• Flexible work environment.