Senior Security Operations Engineer (AI)

Location: Remote in the USA, Canada, or Mexico

Company

hirify.global is a software platform used by organizations worldwide to manage fleet operations and is a founding member of the Rails Foundation.

What you will do

• Own detection engineering and threat hunting in CrowdStrike Next-Gen SIEM across identity, email, SaaS, and endpoint telemetry.
• Build security automation with CrowdStrike Fusion SOAR, workflow tools, and AI agents for enrichment, containment, paging, ticketing, triage, and investigation.
• Lead corporate incident response, including third-party and supply-chain events, forensics, escalation handling, and root-cause remediation.
• Manage CrowdStrike Falcon, Okta, Mimecast, Google Workspace, SaaS security posture, device trust, privileged access, and access reviews.
• Design and operate DLP across email, collaboration tools, endpoints, and SaaS applications, investigating data exposure and insider misuse.
• Run vulnerability management for corporate assets and report clear security-posture metrics.

Requirements

• 5+ years of experience in security operations, detection and response, or security engineering, ideally in a SaaS company.
• Experience with SIEM-based detection engineering and threat hunting, including CrowdStrike Next-Gen SIEM or a similar platform.
• Experience building SOAR playbooks that connect identity, endpoint, email, and SaaS tools, using Python or PowerShell and REST APIs.
• Incident response experience from triage through forensics, root cause, and follow-up across cloud, identity, and SaaS environments, including collaboration with an MDR or managed SOC provider.
• Identity security experience with Okta or a similar provider, including authentication policy, privileged access, and access reviews in a SOC 2 or ISO 27001 control environment.
• Endpoint security experience with CrowdStrike or a similar platform, including macOS, device trust, and endpoint query tooling.
• Experience with email security, SaaS security posture management, and DLP program design, classification, policy tuning, and data-exposure investigations.
• Experience securing developer tooling and the software supply chain, including IDE extensions, package registries, and AI coding tools.
• Excellent written and verbal communication skills, including explaining risk to non-technical leaders.

Nice to have

• Experience securing AI tools and agents, including governance, identity and access, data-exposure and prompt-injection risks, and AI detection and response tooling.
• Experience building AI agents, LLM-powered automations, or integrations using tool/function calling or MCP.
• Experience using LLMs for security-alert triage, enrichment, and investigation.

Culture & Benefits

• Remote-working friendly since 2012.
• Health and dental coverage, vision insurance, FSA and HSA options, disability coverage, and a 4% 401(k) match.
• Four weeks of PTO, 12 company holidays, two floating holidays, and paid parental leave.
• Incentive stock options, professional development funds, community service funds, wellbeing funds, and business expense stipends.
• Mac laptop and new-hire equipment stipend.