Senior Cyber Engineer (AI Security)

Location: US-Remote; mandatory onsite Trailhead onboarding at headquarters once per quarter, with required travel and accommodation covered.

Salary: $120,500 per year, plus performance-based incentives and benefits.

Company

hirify.global provides healthcare financial services focused on empowering healthcare consumers and connecting health and wealth.

What you will do

• Build and operate defenses for AI applications, coding assistants, agents, and MCP servers, including AI governance, DLP, runtime protection, access control, gateways, and audit logging.
• Engineer and operate Cloudflare services including WAF, API Shield, Bot Management, DDoS protection, Cloudflare One, DLP, and Browser Isolation.
• Engineer and operate Palo Alto Networks firewalls, Panorama, Strata Cloud Manager, Prisma Access, and GlobalProtect, including segmentation, security policies, upgrades, and policy hygiene.
• Automate configurations and controls with Terraform, Ansible, Python, APIs, Git, and CI/CD.
• Send platform telemetry to the SIEM, build detections for AI-related threats, respond to incidents, and participate in the on-call rotation.
• Partner with Application Security, Architecture, Data, Privacy, and Compliance to create secure reference architectures, standards, runbooks, and enforceable controls.

Requirements

• 7+ years of experience in security, network, or infrastructure engineering.
• Deep hands-on production experience with either Palo Alto Networks or Cloudflare, plus production experience with the other platform.
• Hands-on experience securing generative AI in production, such as AI-use controls, DLP for AI traffic, AI gateways, LLM firewalls, or LLM-based applications and agents.
• Working knowledge of prompt injection, sensitive information disclosure, excessive agency, tool misuse, OWASP Top 10 for LLM Applications, OWASP Top 10 for Agentic Applications, and MITRE ATLAS.
• Strong networking fundamentals covering TCP/IP, routing including BGP, DNS, TLS and PKI, HTTP, proxies, and IPsec.
• Experience with Terraform, Git, CI/CD, and Python automation.
• Experience integrating SAML, OIDC, OAuth 2.0, and SCIM with Microsoft Entra ID, Okta, or a similar enterprise identity provider.
• Experience in a regulated environment handling sensitive health or financial data, such as HIPAA, PCI DSS, or SOC 2.
• Clear written communication for technical and non-technical audiences.

Nice to have

• Palo Alto Networks Next-Generation Firewall Engineer or Network Security Professional certification; active PCNSE is welcome.
• Experience with Prisma AIRS, Cloudflare AI Gateway, AI Security for Apps, MCP server portals, AI agents, or MCP servers.
• Cloudflare Workers development with JavaScript or TypeScript.
• Cloud network security experience in AWS, Azure, or Google Cloud.
• Detection engineering with Cortex XSIAM, Splunk, Microsoft Sentinel, or a similar platform.
• Familiarity with the NIST AI Risk Management Framework, NIST AI 600-1, or ISO/IEC 42001.

Culture & Benefits

• Remote work with mandatory onsite Trailhead onboarding; onboarding may begin virtually before the onsite session.
• Medical, dental, vision, HSA contribution and match, dependent care FSA match, and 401(k) match.
• Uncapped paid time off and paid parental leave.
• Education and tuition assistance, gym and fitness reimbursement, wellness incentives, and financial literacy programs.
• Reasonable accommodations are available for qualifying disabilities.

Hiring process

• Screening interviews may be transcribed with Microsoft Copilot; candidates may opt out by notifying the Talent Partner in advance.
• Certain interviews may use Pindrop Pulse for identity verification and interview security; candidates may opt out by notifying the Talent Partner in advance.
• Live interviews and assessments must reflect the candidate's own work and thinking without AI assistance unless explicitly approved.