Назад
Company hidden
6 дней назад

Staff Product Security Engineer (AI)

293 000 - 325 000$
Формат работы
onsite
Тип работы
fulltime
Грейд
senior
Английский
b2
Страна
US
Вакансия из списка Hirify.GlobalВакансия из Hirify Global, списка международных tech-компаний
Для мэтча и отклика нужен Plus

Мэтч & Сопровод

Для мэтча с этой вакансией нужен Plus

Описание вакансии

Текст:
/
TL;DR
Staff Product Security Engineer (AI): Securing the products and services powering the World identity and financial network with an accent on threat modeling, security automation, and secure software development. Focus on building AI-agent security pipelines, reviewing Rust/Go/Python code and AWS infrastructure, and scaling vulnerability management and Secure SDLC programs.

Location: San Francisco, US; Workplace type: Onsite

Salary: $293,000–$325,000 per year, plus a competitive long-term incentive package

Company

hirify.global builds the technology behind World, including identity verification, privacy-preserving World ID, World App, cryptography, AI, and global-scale hardware and software infrastructure.

What you will do

  • Lead secure architecture reviews and threat-modeling sessions for applications and services.
  • Build and operate AI-agent security automation pipelines for vulnerability detection and triage, code review, and remediation.
  • Engineer automated security guardrails, reusable tools, and libraries that make secure development easier.
  • Perform deep-dive security reviews of code and infrastructure in Rust, Go, and Python.
  • Own vulnerability management, including bug bounty triage and remediation with engineering teams.
  • Mature and scale Secure SDLC and bug bounty programs.

Requirements

  • 6+ years of hands-on experience in Product Security or Application Security.
  • Experience building and operating security automation pipelines using AI agents for vulnerability detection and triage, code review, and remediation.
  • Proficiency in code review and development with languages such as Rust, Go, and Python.
  • Extensive experience securing modern AWS architectures and developing secure infrastructure as code with tools such as Terraform and CDK.
  • Ability to assess exploitability, prioritize security risks, and explain practical tradeoffs to engineering teams.
  • Strong background implementing and managing SAST, DAST, and SCA tooling and embedding security into CI/CD pipelines.
  • Deep understanding of web and API security principles, including OWASP Top 10, and experience securing distributed, mobile-first systems.

Nice to have

  • Particular interest in securing mobile applications or smart contracts.

Culture & Benefits

  • Hands-on technical leadership focused on solving novel security challenges at global scale.
  • Healthcare, dental, vision, 401(k) plan and match, and life insurance.
  • Flexible time off and commuter benefits.
  • Professional development stipend and a competitive long-term incentive package.

Будьте осторожны

Если работодатель просит войти в их систему, используя iCloud/Google, прислать код/пароль, запустить код/ПО, не делайте этого. Это мошенники. Обязательно жмите «Пожаловаться» или пишите в поддержку. Подробнее в гайде →