Senior Security Engineer (AI)

Location: Remote within the United States or United Kingdom; able to travel to sites in the US and Europe as needed

Company

hirify.global operates an AI inference platform and builds its own distributed infrastructure, including GPU-powered Sonic Inference Pods, managed Kubernetes clusters, and the control plane connecting deployments across the US and Europe.

What you will do

• Own security architecture for bare-metal GPU nodes, immutable images, signed build pipelines, boot integrity, identity, secrets, and access across the fleet.
• Design and verify multi-tenant isolation across network, Kubernetes, host, and GPU layers, producing evidence for enterprise customers.
• Harden managed Kubernetes clusters through admission control, RBAC, image supply-chain controls, and auditable customer handover.
• Build fleet-wide logging, detection, alerting, audit trails, vulnerability management, and on-call visibility from firmware to API.
• Lead threat modeling, security reviews, infrastructure incident response, vulnerability remediation, and post-incident improvements.
• Support sovereign and on-premise deployments, enterprise security reviews, SOC 2 and ISO 27001 controls, and AI-assisted evidence collection and security automation.

Requirements

• 8+ years in security or infrastructure engineering, including several years securing production infrastructure at scale for a company operating its own hardware.
• Experience building and operating security controls across a fleet, including hardening standards, access models, or detection pipelines.
• Deep hands-on Linux security expertise covering kernel hardening, namespaces, cgroups, seccomp, eBPF, secure and measured boot, TPM-based attestation, and process-level visibility.
• Strong Kubernetes security knowledge, including RBAC, admission control, policy engines, network policy, runtime security, image signing, SBOMs, and container escape risks.
• Network security expertise for physical infrastructure, including segmentation, VLAN or VXLAN isolation, firewalls, out-of-band management, BMC, IPMI, and switch management planes.
• Experience with identity, secrets, and PKI at scale, including short-lived credentials, workload identity, hardware-backed keys, and removal of standing access.
• Fluent in Python or Go and able to build security tooling, scanners, and automation independently.
• Daily use of AI for scripting, log analysis, code review, documentation, and incident triage, with a practical view of AI-enabled security-team operations.
• Clear communication across engineering, customer CISO, and founder audiences, with pragmatic risk assessment.

Nice to have

• Experience securing GPU clusters for AI training or inference, including NVIDIA drivers, fabric manager, GPU multi-tenancy, confidential GPU computing, and model-weight protection.
• Firmware and hardware security experience with UEFI, BMC and NIC firmware, Redfish, hardware roots of trust, and server supply-chain attestation.
• Experience with InfiniBand or RoCE fabrics and RDMA security.
• Experience delivering SOC 2 or ISO 27001, compliance tooling, and evidence automation.
• Offensive infrastructure security experience, including red teaming, penetration testing, or vulnerability research.
• Experience with sovereign, air-gapped, regulated, or data-residency-sensitive deployments, plus physical security for data centres or edge sites.

Culture & Benefits

• Remote-first work with in-person meetings twice a year; core collaboration hours are required, while the remaining schedule is flexible.
• Fast, intense release cycles followed by protected downtime.
• Generous paid time off, including vacation, sick days, and public holidays.
• Paid maternity, paternity, and caregiver leave.
• Meaningful stock options and twice-yearly company retreats.