Engineer II - DevSecOps (AI)

Location: Alameda, California, or remote from the United States; up to 5% travel required.

Base salary: $173,000–$220,000 per year.

Company

hirify.global develops and operates biotechnology and pharmaceutical solutions in a regulated environment.

What you will do

• Develop AI-assisted security automation, secure software delivery pipelines, and operational DevSecOps capabilities.
• Integrate security controls and guardrails across cloud services, applications, APIs, infrastructure as code, CI/CD pipelines, AI systems, and development tooling.
• Build prompts, agent workflows, retrieval-assisted use cases, API integrations, scripts, software components, and automated tests with appropriate security, logging, observability, and data protection.
• Identify vulnerabilities and control gaps, investigate security events, and implement risk-based remediation across applications, cloud environments, credentials, APIs, and pipelines.
• Partner with engineering, infrastructure, data, business teams, vendors, and partners to deliver secure technology solutions.
• Maintain architecture documentation, deployment procedures, user guidance, operational runbooks, and contribute to reviews, threat modeling, testing, demos, and backlog refinement.

Requirements

• Bachelor’s degree in a related discipline and 5 years of related experience, or a master’s degree and 3 years of related experience, or an equivalent combination of education and experience.
• Experience developing and maintaining software, automation, or infrastructure solutions in an enterprise environment.
• Experience integrating security controls into cloud platforms, applications, APIs, infrastructure as code, and CI/CD pipelines.
• Experience with cloud, AI systems, application security, vulnerability management, secure software development, cybersecurity tools, secrets management, and logging or monitoring.
• Experience investigating and remediating security findings or events involving applications, cloud services, development pipelines, or access controls.
• Experience working in Agile environments with work and service management tools such as JIRA and JSM.
• Proficiency in a scripting or programming language such as Python, PowerShell, JavaScript/TypeScript, or Java, together with command-line tooling.
• Knowledge of AWS, IAM, network controls, encryption, secrets management, secure configuration, infrastructure as code, secure SDLC, automated testing, software supply chain security, threat modeling, and vulnerability remediation.
• Ability to validate AI-generated code, prompts, configurations, and automated actions; protect confidential data; manage ambiguity and priorities; and communicate with technical and non-technical stakeholders.
• Working knowledge of PII, PHI, GDPR, CPRA, and applicable privacy and security requirements.

Nice to have

• Experience in regulated industries such as biotechnology or pharmaceuticals, with knowledge of GxP, SOX, privacy, or related compliance requirements.
• Working knowledge of machine learning, generative AI, LLMs, prompt engineering, agent workflows, retrieval-assisted systems, and responsible AI practices.

Culture & Benefits

• Full-time employee position with medical, dental, vision, life, disability, and flexible spending benefits.
• 401(k) plan with company contributions, annual discretionary bonus eligibility, stock purchase opportunities, and long-term incentives.
• 15 accrued vacation days in the first year, 17 paid holidays including a company-wide winter shutdown, and up to 10 sick days annually.
• Collaborative office environment with provided equipment, including dual monitors and ergonomic chairs.
• No supervisory responsibilities; up to 5% travel is required.