Senior Security Engineer (AI)

Location: HQ, United States

Salary: $145K–$175K plus equity

Company

hirify.global is an early-stage healthcare startup using AI to improve care navigation, patient access, provider focus, and healthcare outcomes. The platform serves health systems across the U.S. and has expanded to the MENA region.

What you will do

• Own the security and compliance program, including SOC 2 Type II, HIPAA safeguards, risk assessments, vendor BAAs, penetration-test remediation, and future HITRUST and international requirements.
• Lead customer security reviews, questionnaires, and audits with hospital IT and security teams in the U.S. and MENA.
• Define engineering security guidelines covering secure design reviews, application security, dependency and code scanning, and secrets management.
• Own identity and access management across Auth0, Google Workspace, SSO, MFA, cloud, and SaaS, including access reviews and least privilege.
• Build and operate secure GCP/GKE infrastructure with Terraform and CI/CD alongside DevOps, including IAM hardening, network controls, and policy as code.
• Govern PHI, detection, incident response, and AI-agent security, including audit logging, retention, breach notification, and threat modeling for prompt injection, tool misuse, and sensitive data disclosure.

Requirements

• 5+ years of experience in security engineering or infrastructure with security ownership.
• Hands-on production experience with SOC 2 and HIPAA, using Vanta, Drata, or a similar platform.
• Application security experience including secure code review, threat modeling, and CI/CD scanning.
• Identity and access management experience with Auth0, Okta, or similar, including SSO and MFA across SaaS.
• Strong GCP or AWS security experience, plus production Kubernetes and Terraform experience.
• Scripting experience in Python or Go.
• Clear communication with engineers, auditors, and customer security teams, with the ability to lead customer-facing reviews.

Nice to have

• Healthcare experience handling PHI.
• HITRUST, ISO 27001, UAE, or other international healthcare compliance experience.
• Experience securing LLM or voice AI products.
• Experience as an early or first security hire at a startup.

Culture & Benefits

• Values service, integrity, compassion, kindness, optimism, safety, transparency, curiosity, and evidence-based decision-making.
• Emphasizes collaboration, mutual respect, constructive feedback, and thoughtful use of automation and AI.
• Full-time employment with equity offered.