Senior Corporate IT Security Engineer (AI)

Location: United States; remote within the country, with roles varying between nationwide remote and hub-based arrangements

Annual base salary: $173,000–$215,000 for San Francisco Bay Area and New York City; $150,000–$185,000 for all other US locations.

Company

hirify.global develops healthcare software based on de-identified real-world patient data, algorithms, and its Healthcare Map to generate insights across the healthcare ecosystem.

What you will do

• Engineer and operate corporate security across identity, devices, endpoints, internal networks, workforce SaaS, and employee AI tools.
• Harden identity and access controls, including phishing-resistant MFA, SSO, session policies, least-privilege administration, service accounts, and lifecycle automation.
• Implement device trust and conditional access across macOS and Windows using MDM and EDR tooling.
• Secure workforce SaaS through export and API controls, OAuth governance, audit logging, session protections, and shadow-IT detection.
• Lead corporate-environment incidents, coordinate IT, Security, Legal, Compliance, and Communications, and run post-incident reviews.
• Establish workforce AI guardrails covering approved tools, SSO, RBAC, retention, logging, access reviews, and vendor-security intake.

Requirements

• 6–8+ years in corporate security, IT security, security engineering, or security operations, including 4+ years of hands-on corporate-control engineering at a cloud-native or SaaS company.
• Hands-on enterprise identity-provider experience with SAML, OIDC, OAuth 2.0, SCIM, sign-on and session policies, device assurance or conditional access, and lifecycle automation.
• Hands-on device trust, MDM, and EDR experience across macOS and Windows, including posture-based access deployment.
• Experience hardening productivity suites and major SaaS platforms through admin-role controls, export and API permissions, OAuth governance, and audit logging.
• Experience defining detection use cases and writing or tuning detection rules with a security operations team.
• Experience serving as incident commander or lead responder, making containment decisions, and running post-incident reviews that result in corrective action.
• Production-quality scripting in Python or a similar language and security-tool integrations through APIs.
• Experience producing SOC 2 and other audit evidence.
• Clear technical writing and executive communication, with cross-functional influence across IT, Engineering, Security, Legal, People, and Procurement.
• Experience partnering with Legal and Compliance on investigations, audits, or regulatory reviews.
• Required: use AI for triage, investigation, documentation, and automation while retaining human accountability for every decision.
• People-management experience is not required; this is a senior individual-contributor role.

Nice to have

• Experience in healthcare, life sciences, or another environment handling regulated or sensitive data.
• Experience at a high-growth Series C–E or pre-IPO company.
• Identity workflow automation, identity threat detection, or device-assurance integrations.
• SSPM or compliance-automation platform experience.
• Insider-risk or DLP programs, or digital forensics.
• Experience evaluating and implementing enterprise security vendors.
• GCIH, CISSP, or similar certifications.

Culture & Benefits

• Remote and hybrid work options within the US, with hubs in San Francisco, New York City, and Chicago.
• At least 70% of the role is hands-on configuration, scripting, investigation, and remediation; the remainder covers incident response, documentation, and partnership.
• Health, dental, and vision insurance; flexible time off and holidays; 401(k) with company match; disability and life insurance; and applicable leaves of absence.
• Potential performance-based bonus and equity awards.
• Values emphasize growth, high-quality delivery, collaboration, and reducing the global burden of disease.