Senior Staff Platform Security Engineer (AI)

Location: Warsaw, Poland

Company

hirify.global develops data resilience and data security posture management solutions for organizations, including regulated industries, and operates a multi-cloud SaaS platform.

What you will do

• Set and deliver technical direction for platform and AI security across hirify.global SaaS platforms.
• Drive software supply chain security, secure AI practices, and vulnerability management as engineering systems.
• Deliver security controls as Terraform modules and build automation to reduce operational toil.
• Partner with Product Engineering, SRE, Corporate Technology, Compliance, and other technical leads.
• Raise the engineering bar and participate in an on-call rotation.

Requirements

• 8+ years across security and engineering, including recent depth in cloud platform security and hands-on delivery.
• Production Terraform experience at scale, including reusable modules consumed by other teams and judgment about implementing controls in code.
• Hands-on AI and LLM security experience covering prompt injection, indirect prompt attack surfaces, agent tool-boundary abuse, and model exfiltration.
• Deep Azure experience with Entra ID and RBAC, Key Vault and key handling, network egress, workload and managed identity, and policy enforcement.
• Practical software supply chain security experience with dependency risk, build pipeline integrity, provenance, signing, and developer-friction trade-offs.
• Engineering ownership of vulnerability management, including ingestion, deduplication, routing, SLA design, and measurable risk reduction.
• Experience designing isolation boundaries for untrusted code execution across network, identity, and data, supported by a defensible threat model.
• Ability to build and maintain tooling in Python or Go, rather than only configure vendor products.
• Track record of setting technical direction and shipping production code; this is a hands-on building role, not an advisory position.
• Familiarity with regulated-industry expectations including SOC 2 Type 2, ISO 27001, FedRAMP, and HITRUST, and with acceptable audit evidence.

Nice to have

• Experience with agentic development environments such as Claude Code, Cursor, or GitHub Copilot Enterprise and their operational security implications.
• Production-scale CSPM and ASPM experience, including tuning signals into an owned and closing queue.
• Kubernetes and container security experience with AKS or EKS, runtime detection, admission control, and image policy.
• Experience with Sigstore, SLSA, in-toto, or equivalent provenance frameworks.
• Deep AWS experience alongside Azure.
• Contributions to open-source security, supply chain, or LLM safety tooling.
• Relevant Azure or AWS security, GIAC, or similar certifications.

Culture & Benefits

• 26 paid days off annually, four additional global hirify.globale Days, and 24 paid volunteer hours through hirify.global Cares.
• Paid parental, maternity, and paternity leave.
• Fully covered family medical, dental, rehabilitation, vaccination, life, critical illness, and disability coverage.
• Employer pension contribution via PPK, a monthly Edenred meal allowance of 450 PLN, and a fully covered MultiSport card.
• Up to 12 free therapy sessions annually plus legal and financial advice.
• Learning opportunities through LinkedIn Learning, O'Reilly, mentoring, workshops, and Global Day of Learning events.