Senior Security Engineer (AI)

Location: Remote

Total compensation, including bonuses: $180K–$240K

Company

hirify.global builds AI-driven technologies for enterprise cyber-attack response, recovery, and resilience.

What you will do

• Own security across cloud infrastructure, AI platforms, corporate endpoints, identity, email, and business applications.
• Build detection and response capabilities across cloud, identity, and endpoint telemetry.
• Harden cloud and container environments, including posture management, vulnerability prioritization, workload protection, and runtime security.
• Secure CI/CD pipelines and the software supply chain through automated analysis, secret scanning, dependency controls, and artifact integrity protections.
• Design controls and evidence that demonstrate how sensitive customer data is protected.
• Automate security guardrails and develop security tooling and detections.

Requirements

• 6+ years of hands-on security engineering experience, including at least 3 years securing production cloud environments.
• Deep experience securing workloads on major public cloud platforms, including identity and access management, network segmentation, encryption and key management, logging, and organization-level guardrails.
• Production experience securing container orchestration platforms and containerized workloads, including image hardening, admission control, and runtime protection.
• Hands-on experience with cloud security posture management, vulnerability prioritization, cloud workload protection, enterprise EDR and XDR platforms, detection triage, and response.
• Experience building detections and running investigations across cloud, identity, and endpoint telemetry, including incident response, DFIR, or managed detection and response environments.
• Strong understanding of identity security, including SSO, MFA, conditional access, and least-privilege access for engineers and service accounts.
• Experience securing CI/CD and software supply chains, including static analysis, secret scanning, infrastructure-as-code scanning, dependency risk management, and artifact integrity.
• Infrastructure-as-code experience, with the ability to remediate findings directly; experience with secrets management at scale.
• Proficiency in Python or Go for automation, tooling, and detection engineering.
• Experience securing corporate IT, including device management, endpoint hardening, email, and SaaS application security.
• Sound judgment when handling sensitive, privileged, and regulated data.
• Experience securing LLM and agentic AI systems, including prompt injection defenses, action authorization, and isolation of untrusted execution.
• Experience with Zero Trust access architectures and multi-tenant SaaS isolation and third-party integrations.
• Working knowledge of SOC 2, ISO 27001, or similar frameworks, with an emphasis on controls that are automated and continuously evidenced.
• Offensive security, red team, or cloud penetration testing experience.
• Relevant certifications such as OSCP, GCIH, GCFA, or cloud security specialty certifications.

Culture & Benefits

• Remote full-time role within the Engineering department.
• Founding engineering team position with ownership of security for platforms trusted during active cyber-attacks.
• Security is treated as a product capability integrated into engineering work.
• Work focuses on protecting highly sensitive customer data while enabling engineering velocity.