Member of Technical Staff, Product Security (AI)

Location: San Francisco, California; remote work in the US may be considered for exceptional candidates

Annual salary: $200,000–$400,000 USD plus equity

Company

hirify.global develops vLLM-based AI inference technology to make model inference cheaper and faster for enterprise customers.

What you will do

• Own product security for the inference platform, APIs, control plane, cloud and Kubernetes infrastructure, and software delivery lifecycle.
• Threat-model new features with inference, infrastructure, product, and forward-deployed engineering teams.
• Review and write production code, identify and remediate vulnerabilities, and create tests for security fixes.
• Build secure defaults, security tooling, guardrails, and libraries that help engineers ship safely.
• Coordinate with the engineer responsible for vLLM vulnerability management when upstream issues affect the product.
• Set product-security direction and carry security work from design review through shipped fixes.

Requirements

• Hands-on product or application security experience with customer-facing software, including finding, fixing, and preventing real vulnerabilities rather than only running scanners or tracking compliance.
• Strong software engineering ability, including reading and writing production code, reviewing pull requests, and shipping fixes with validating tests.
• Experience threat-modeling and reviewing distributed systems, APIs, and services, including authentication, authorization, multi-tenancy, data isolation, and secrets handling.
• Working knowledge of cloud and container security, including IAM, network boundaries, Kubernetes, and infrastructure as code.
• Sound risk judgment and the ability to distinguish reachable risks from theoretical risks and select controls appropriate to the company stage.
• Clear written and verbal communication with engineers, leadership, and customer security teams, plus discretion with sensitive information.

Nice to have

• Experience securing AI/ML infrastructure, model serving, GPU workloads, or developer platforms.
• Experience securing software supply chains and CI/CD, including dependency risk, build integrity, artifact signing, and container image hardening.
• Familiarity with inference-system risks such as untrusted model loading, tenant isolation on shared hardware, and prompt and output handling.
• Experience building security tooling, paved roads, or secure-by-default libraries adopted by engineers.
• Experience handling the technical aspects of enterprise customer security reviews and supporting deployments in customer cloud environments.
• Credited CVEs, security fixes, or security tooling in widely used open-source infrastructure; experience building product security at an early-stage company; offensive security or security research converted into engineering fixes; or contributions to vLLM, PyTorch, or other inference and ML infrastructure.

Culture & Benefits

• Full-time position in the Research & Engineering department.
• Health, dental, and vision benefits.
• 401(k) company match.
• Visa sponsorship is available on a case-by-case basis.