Вакансия из Hirify Global, списка международных tech-компаний Для мэтча и отклика нужен Plus
Пожаловаться
Зарплата и рынок
Многоразвернуть
$293к-325к/год
$200к$230кмедиана$270к
По похожим ролям (48) ~ $230к/год
90
Крутая вакансия
развернуть
Роль чётко очерчена и сочетает практическую безопасность с автоматизацией для крупной AI-платформы идентификации; заявленный режим «крайней срочности» стоит учитывать при оценке темпа работы.
Мэтч & Сопровод
Для мэтча с этой вакансией нужен Plus
Подключить Plus
Описание вакансии
Текст:
Hirify AI/Оригинал
TL;DR
Staff Product Security Engineer (AI): Securing the products and services powering the World identity and financial network with an accent on threat modeling, security automation, and secure software development. Focus on building AI-agent security pipelines, reviewing Rust/Go/Python code and AWS infrastructure, and scaling vulnerability management and Secure SDLC programs.
Location: San Francisco, US; Workplace type: Onsite
Salary: $293,000–$325,000 per year, plus a competitive long-term incentive package
Company
hirify.global builds the technology behind World, including identity verification, privacy-preserving World ID, World App, cryptography, AI, and global-scale hardware and software infrastructure.
What you will do
Lead secure architecture reviews and threat-modeling sessions for applications and services.
Build and operate AI-agent security automation pipelines for vulnerability detection and triage, code review, and remediation.
Engineer automated security guardrails, reusable tools, and libraries that make secure development easier.
Perform deep-dive security reviews of code and infrastructure in Rust, Go, and Python.
Own vulnerability management, including bug bounty triage and remediation with engineering teams.
Mature and scale Secure SDLC and bug bounty programs.
Requirements
6+ years of hands-on experience in Product Security or Application Security.
Experience building and operating security automation pipelines using AI agents for vulnerability detection and triage, code review, and remediation.
Proficiency in code review and development with languages such as Rust, Go, and Python.
Extensive experience securing modern AWS architectures and developing secure infrastructure as code with tools such as Terraform and CDK.
Ability to assess exploitability, prioritize security risks, and explain practical tradeoffs to engineering teams.
Strong background implementing and managing SAST, DAST, and SCA tooling and embedding security into CI/CD pipelines.
Deep understanding of web and API security principles, including OWASP Top 10, and experience securing distributed, mobile-first systems.
Nice to have
Particular interest in securing mobile applications or smart contracts.
Culture & Benefits
Hands-on technical leadership focused on solving novel security challenges at global scale.
Healthcare, dental, vision, 401(k) plan and match, and life insurance.
Flexible time off and commuter benefits.
Professional development stipend and a competitive long-term incentive package.
Будьте осторожны
Если работодатель просит войти в их систему, используя iCloud/Google, прислать код/пароль, запустить код/ПО, не делайте этого. Это мошенники. Обязательно жмите «Пожаловаться» или пишите в поддержку. Подробнее в гайде →