Senior Platform Security Engineer

Location: Remote, based in the U.S.A.; seldom travel may be required.

Company

hirify.global builds compute-power solutions including a mining pool, custom firmware, ASIC brokerage, hashrate derivatives, and compute infrastructure for CI and AI agents.

What you will do

• Advise the platform engineering team on security requirements during sprint planning, architecture reviews, process discussions, product direction, design decisions, and implementation.
• Build and maintain centralized automated security testing and enforcement across CI/CD, including SAST, DAST, SCA, secrets scanning, and IaC scanning.
• Manage cloud vulnerability and configuration monitoring, integrating patching and hardening into engineering operations.
• Audit application environments and development processes for compliance with internal and external requirements and security standards.
• Implement cloud detection and response monitoring, serve as an incident CIRT responder, and enforce device-management policies and detections.
• Document controls, configurations, and decisions to maintain durable institutional knowledge.

Requirements

• Bachelor’s degree in Computer Science, Information Technology, Cybersecurity, or equivalent practical experience.
• 8+ years of experience in DevOps, software engineering, or security engineering.
• Proficiency with CI/CD platforms such as GitHub Actions, infrastructure-as-code tools such as Terraform, and configuration-management tools such as Ansible.
• Proficiency in at least two of Go, JavaScript, Rust, and Python, plus strong Python or Bash scripting skills for automation and integration.
• Hands-on cloud security experience in one or more of GCP, Alibaba, AWS, OVH, Hetzner, and Azure, including IAM, containerization, network security controls, encryption, logging, and monitoring.
• Experience hardening access and controls, including IAM policies.
• Hands-on experience with Kubernetes GitOps, such as Flux or ArgoCD.
• Experience implementing automated application and infrastructure security testing, secrets management, and policy-as-code enforcement.
• Familiarity with application penetration testing or experience conducting penetration-testing engagements.
• Experience supporting third-party attestations and audits such as SOC 2 Type 2 and ISO 27001, including preparation, implementation, and ongoing evidence collection.
• Experience operating and maintaining Zero Trust network infrastructure using Tailscale and Cloudflare WARP, including user support, access-policy management, and remote-connectivity troubleshooting.
• Strong communication and governance skills, including translating technical risk for technical and non-technical audiences and advocating for security without slowing delivery.

Culture & Benefits

• Fully remote work based in the U.S.A.
• Seldom travel may be required.
• Security and compliance function ownership with autonomy in a fast-growing startup environment.
• AI tools may support CV, qualification, assignment, and interview transcription workflows; human hiring-team members make decisions.
• Interview voice recordings are automatically deleted within 15 days, and candidates may request to opt out of AI-supported features.

Hiring process

• AI may assist with reviewing CVs, qualifications, and assignments, while each application is evaluated by a member of the hiring team.
• Interviews may be transcribed using AI, with recordings deleted within 15 days.