Senior Staff Security Engineer (AI)

Location: Prague, Czechia

Company

hirify.global develops data resilience and data security solutions, including a multi-cloud SaaS platform for regulated industries.

What you will do

• Set and deliver technical direction for platform and AI security across hirify.global SaaS platforms.
• Drive software supply chain security, secure AI practices, and vulnerability management as engineering systems.
• Deliver security controls as Terraform and build automation to reduce operational toil.
• Partner with Product Engineering, SRE, Corporate Technology, Compliance, and other technical leads.
• Raise the engineering bar and participate in an on-call rotation.

Requirements

• 8+ years across security and engineering, including recent depth in cloud platform security and hands-on production delivery.
• Production Terraform at scale, including reusable modules consumed by other teams.
• Specific AI and LLM security experience covering prompt injection, indirect prompt attack surfaces, agent tool-boundary abuse, and model exfiltration.
• Deep Azure experience with Entra ID and RBAC, Key Vault, key handling, network egress, workload and managed identity, and policy enforcement.
• Practical software supply chain security experience with dependency risk, build pipeline integrity, provenance, and signing.
• Hands-on vulnerability management engineering covering ingestion, deduplication, routing, SLA design, and measurable reduction.
• Experience designing isolation boundaries for untrusted code execution across network, identity, and data, supported by a defensible threat model.
• Tooling ability in Python or Go to build and maintain systems.
• Track record of setting technical direction and shipping production code; this is a hands-on building role, not an advisory role.
• Familiarity with regulated-industry expectations including SOC 2 Type 2, ISO 27001, FedRAMP, and HITRUST.

Nice to have

• Experience with agentic development environments such as Claude Code, Cursor, or GitHub Copilot Enterprise and their operational security implications.
• Production-scale CSPM and ASPM tooling, including tuning signals into an owned and closing queue.
• Kubernetes and container security across AKS or EKS, including runtime detection, admission control, and image policy.
• Sigstore, SLSA, in-toto, or equivalent provenance frameworks.
• AWS depth alongside Azure.
• Contributions to open-source security, supply chain, or LLM safety tooling.
• Relevant Azure or AWS security, GIAC, or similar certifications.

Culture & Benefits

• 25 vacation days, 4 sick days, 21 paid medical leave days, 4 additional hirify.globale Days, and 24 paid volunteer hours annually.
• Premium private medical insurance for employees and dependents.
• Daily meal vouchers worth 180 CZK per working day and a flexible cafeteria platform.
• Multisport Card, annual public transport reimbursement, and a corporate mobile plan with optional family tariff.
• Learning opportunities through LinkedIn Learning, O'Reilly, mentoring, workshops, and Global Day of Learning.