Назад
Company hidden
8 дней назад

Principal Software Engineer (Information Security)

110 000 - 220 000$
Формат работы
onsite
Тип работы
fulltime
Грейд
senior
Английский
b2
Страна
US
Вакансия из списка Hirify.GlobalВакансия из Hirify Global, списка международных tech-компаний
Для мэтча и отклика нужен Plus

Мэтч & Сопровод

Для мэтча с этой вакансией нужен Plus

Описание вакансии

Текст:
/
TL;DR
Principal Software Engineer (Information Security) (AI Security): Building secure, scalable software and infrastructure for AI-driven assets with an accent on agent-system threat modeling, secure integrations, and model governance. Focus on defending against prompt injection and privilege escalation, securing software and model supply chains, and aligning autonomy policies with NIST AI RMF.

Location: 805 SE Moberly Ln., Bentonville, Arkansas, United States; designated home office

Annual salary: $110,000–$220,000, plus performance bonuses and possible stock compensation.

Company

hirify.global develops retail and data-driven technology solutions; the AI Security Team protects enterprise AI-driven assets and infrastructure.

What you will do

  • Design and implement secure, scalable software solutions aligned with business objectives and security requirements.
  • Threat-model agent systems using frameworks such as OWASP Top 10 for LLM Applications and MITRE ATLAS.
  • Secure tools, MCP servers, integrations, and code-execution or browsing environments by reviewing schemas, validating inputs and outputs, and applying sandboxing.
  • Protect multi-agent and agent-to-agent communication against injected instructions, privilege escalation, and excessive delegation.
  • Secure the software supply chain and model governance, including vetting base models and fine-tuned open-weight derivatives.
  • Collaborate with security, legal, privacy, and product stakeholders on autonomy levels, acceptable use, NIST AI RMF alignment, testing, telemetry, and operational readiness.

Requirements

  • Extensive software engineering experience with a strong focus on information security principles and practices.
  • Python proficiency and familiarity with coding standards, frameworks, and platforms including Microsoft Azure and AWS.
  • Expertise in designing scalable, secure architectures and implementing telemetry.
  • Ability to translate business requirements into technical solutions aligned with organizational goals.
  • Strong stakeholder management skills and the ability to communicate complex technical concepts clearly.
  • Experience driving quality assurance, testing strategies, and defect management.
  • Experience leading teams and mentoring associates.
  • Either a bachelor's degree in computer science, information technology, engineering, information systems, cybersecurity, or a related area plus 5 years of software engineering or related experience at a technology, retail, or data-driven company; or 7 years of such experience without the stated degree.

Nice to have

  • Security+, GISF, CISSP, CCSP, or GSEC certification.
  • Master's degree in a relevant technical or cybersecurity field.
  • 3 years of experience leading information security or cybersecurity projects.
  • Experience creating inclusive digital experiences, implementing WCAG 2.2 AA standards, using assistive technologies, and applying digital accessibility best practices.

Culture & Benefits

  • Full-time employment with medical, vision, dental, life insurance, disability coverage, and 401(k) benefits.
  • Paid time off, including sick leave, parental leave, family care leave, bereavement, jury duty, voting leave, vacation, and holidays.
  • Performance-based annual or quarterly bonuses, stock opportunities, company discounts, and other financial benefits.
  • Walmart-paid education through Live Better U, including tuition, books, and fees for eligible programs.
  • Benefits and paid leave depend on job classification and length of employment and are subject to applicable plan terms.

Будьте осторожны

Если работодатель просит войти в их систему, используя iCloud/Google, прислать код/пароль, запустить код/ПО, не делайте этого. Это мошенники. Обязательно жмите «Пожаловаться» или пишите в поддержку. Подробнее в гайде →