Director of Engineering for Webapp and AI Attack

Location: US, Remote; remote-first company; up to 15% travel may be required.

Base salary: $290,000–$340,000 per year, plus equity in the form of stock options.

Company

hirify.global is a remote cybersecurity product company developing NodeZero, a platform for production-safe autonomous penetration testing and security assessment operations.

What you will do

• Lead and develop the Webapp and AI Attack engineering teams, including managers, technical leaders, and senior individual contributors.
• Define portfolio strategy, roadmaps, ownership, operating mechanisms, and measurable outcomes across customer needs, product priorities, research, and engineering investments.
• Guide NodeZero’s web application attack capabilities, including application discovery, crawling, browser automation, authentication and session handling, attack coverage, and feedback between discovery and testing.
• Turn AI/LLM and agentic-system security research into safe, reliable, repeatable product capabilities covering trust boundaries, permissions, tool use, data sources, model-serving, retrieval architectures, and enterprise deployments.
• Partner with Product, Platform, Engineering, and customer-facing teams to manage tradeoffs, dependencies, risks, production delivery, monitoring, incident response, and continuous improvement.
• Build a high-performing, inclusive organization through hiring, coaching, feedback, accountability, talent planning, career development, and succession planning.

Requirements

• Significant experience leading software engineering teams that build customer-facing products, ideally in cybersecurity, security testing, or another technically complex SaaS domain.
• Experience leading multiple teams and developing engineering managers and senior technical leaders, with a record of building accountable, high-performing organizations.
• Demonstrated ability to set strategy and deliver across multiple teams, translating business and customer priorities into focused roadmaps and measurable outcomes.
• Strong technical judgment in software architecture, automation, distributed systems, and production operations, with the ability to engage credibly with engineers and technical leaders.
• Experience taking complex capabilities from early research or concept through reliable production delivery and ongoing improvement.
• A customer-oriented product mindset and judgment balancing innovation, coverage, reliability, safety, delivery speed, and maintainability.
• Ability to build partnerships across Engineering, Product, and customer-facing teams, resolve misalignment, and communicate decisions and risks clearly.
• Commitment to coaching, clear performance feedback, inclusive leadership, and healthy team culture; strong written, verbal, and analytical communication skills.
• High initiative, ownership, and accountability, with comfort operating in a fast-moving environment with ambiguity.
• Bachelor’s or Master’s degree in Computer Science, Engineering, or a related field, or equivalent practical experience.

Nice to have

• Familiarity with offensive security, web application penetration testing, vulnerability research, attack automation, or building security products.
• Working knowledge of modern web application architecture, HTTP, authentication and session flows, APIs, browser automation, and testing real-world applications at scale.
• Familiarity with AI/LLM and agentic-system security, including trust boundaries, tool-use risks, and evaluation approaches.
• Experience with cloud software and production platforms and fluency in Python, TypeScript, Go, or a comparable modern programming language.
• Understanding of CI/CD, automated testing, observability, incident response, and operational readiness.
• Leadership experience across web application security and AI/LLM security, or deep expertise in one area with the ability to build leadership in the other.
• Experience with web crawling, spidering, browser automation, application discovery, or SSO, SAML, and OIDC authentication technologies.
• Experience shipping AI/LLM security capabilities, building agentic workflows, or applying OWASP Top 10 for LLM Applications or MITRE ATLAS.
• Security research, open-source tooling, technical publications, conference talks, or other work advancing the field.
• Experience with AWS, Azure, or GCP; Neo4j or PostgreSQL; or OSCP, OSEP, or OSWE certifications.

Culture & Benefits

• Remote-first work environment with remote and hybrid models depending on role and location.
• Inclusive, collaborative culture focused on respect, ownership, psychological safety, diversity, equity, and inclusion.
• Health, vision, and dental insurance for employees and families.
• Flexible vacation policy and generous parental leave.
• Career development opportunities and equity through stock options for full-time roles.