Application Security Engineer, Generative AI

Location: Full-time remote work is available from approved US states and Canada; quarterly in-person team gatherings are expected.

Salary: $200,000–$250,000 for the San Francisco Bay Area, Los Angeles/Orange County, New York City, and Seattle; $184,000–$220,000 in other approved cities and towns, plus bonus.

Company

hirify.global is an AI-powered performance marketing platform for the mobile app economy, providing acquisition, retention, monetization, intelligence, and exchange solutions for mobile businesses.

What you will do

• Establish secure software-development standards and integrate security into engineering design and development.
• Create self-service security workflows, reusable tools, and secure design patterns for engineering teams.
• Perform design and code reviews, threat modeling, security assessments, and sandbox isolation reviews for GenAI, Creative GenAI, and emerging businesses.
• Triage and prioritize security issues, guide remediation, assess vendors and AI tools, and verify fixes.
• Build maintainable security automation, including an AI-assisted code-security triage pilot, and translate findings into detection and response improvements.
• Participate in on-call and incident-response rotations, including occasional off-hours response, and conduct blameless post-incident reviews.

Requirements

• 5+ years of relevant experience in security engineering or software engineering.
• Risk-based judgment for prioritizing security efforts and experience partnering with cross-functional teams on practical security improvements.
• Ability to write production-quality code for security tools and automation, review pull requests, and navigate large unfamiliar codebases.
• Strong understanding of secure software design, application and API security, authentication and authorization, threat modeling, and code review.
• Experience assessing cloud and infrastructure security and contributing beyond a primary application-security specialty.
• Ability to understand complex engineering systems and architecture quickly.
• Practical experience with testing, observability, version control, peer code review, continuous integration, and blameless postmortems.
• Strong technical writing skills for design documents, proposals, runbooks, and post-incident reviews, with the ability to explain security risks and tradeoffs clearly.
• Willingness to share on-call and incident-response responsibilities, including occasional off-hours response.

Nice to have

• Experience with Go, Python, Clojure, or JavaScript; ability to work across languages is more important than a specific language.
• Experience securing GenAI applications, designing sandboxes, or evaluating AI-assisted security tools and their output.
• Experience scaling cloud security or working with high-velocity software engineering teams, mobile advertising, or high-volume SaaS environments.

Culture & Benefits

• Remote-first work environment with US hubs in Redwood City, Los Angeles, and New York City.
• Quarterly in-person project meetings, regional meetups, and company-wide events are expected.
• Hands-on technical work across product, vendor, corporate, application, cloud, and infrastructure security.
• Fast-paced, collaborative, and security-conscious engineering environment.
• Compensation includes base salary, bonus, equity, and benefits that may include medical coverage and wellness stipends.

Hiring process

• Applications are evaluated through hirify.global’s Applicant Tracking System; unsolicited submissions from individual recruiters and third-party agencies are not accepted.
• Covey may be used in the hiring process for jobs in New York City and certain other locations.