Senior Security Engineer (Offensive Security)

Location: United States (Remote)

Base salary: $200,000–$250,000 for the SF Bay Area, Los Angeles/Orange County, NYC, and Seattle; $184,000–$220,000 for all other cities and towns in approved states, plus bonus.

Company

hirify.global is an AI-powered performance marketing platform for the mobile app economy, serving mobile businesses across gaming, social, finance, ecommerce, and entertainment.

What you will do

• Plan and execute internal penetration tests across applications, APIs, cloud infrastructure, and corporate systems, prioritizing assessments by risk and business impact.
• Define testing scope and rules of engagement, assess production risk, and safely validate vulnerabilities through hands-on testing, source-code review, and architectural analysis.
• Partner with engineering teams from findings through remediation and retesting, providing practical fixes, reproducible findings, and clear guidance.
• Build reusable security testing tools, workflows, and self-service assessments that combine hands-on testing with continuous automated testing and remediation validation.
• Lead adoption of AI-assisted offensive security tooling for code analysis, test generation, and finding triage, measuring coverage, accuracy, and effort saved.
• Support third-party penetration tests and partner with Detection & Response on detection improvements, incident-response exercises, on-call, and post-incident follow-up.

Requirements

• 5+ years of relevant security engineering experience, including substantial hands-on penetration testing of applications and infrastructure.
• Strong judgment in prioritizing testing by risk, assessing production impact, and safely validating exploits without unnecessary disruption.
• Experience independently owning assessments and partnering with engineering teams through remediation and retesting.
• Ability to write production-quality code for security tools and automation, review pull requests, navigate large unfamiliar codebases, develop safe proof-of-concept code, and independently validate AI-generated code and findings.
• Strong understanding of application and API security, authentication and authorization, network security, and common vulnerability classes.
• Hands-on experience assessing cloud and infrastructure security, including identity and access controls, configuration, and attack paths.
• Ability to understand complex systems and architecture and contribute across application, cloud, and infrastructure security.
• Practical software engineering habits including testing, observability, version control, peer code review, continuous integration, and blameless postmortems.
• Strong technical writing and communication, including assessment plans, proposals, reproducible findings, runbooks, and post-incident reviews.
• Willingness to share on-call and incident-response responsibilities, including occasional off-hours response.

Nice to have

• Experience with Go, Python, Clojure, or JavaScript; ability to work across languages is more important than a specific language.
• Experience building AI-assisted security testing workflows and measuring result accuracy and usefulness.
• Experience securing large-scale cloud systems, mobile advertising, or other high-volume SaaS environments.

Culture & Benefits

• Fast-paced, collaborative, and innovative work environment with opportunities to grow and make an impact.
• Remote work is available for the United States role location.
• Compensation includes base salary, bonus, equity, medical coverage, wellness stipends, and additional perks based on country of residence.
• Employees work across a broad attack surface with engineering partnership and access to source-code and systems context.