Lead Security Engineer (AI)

Location: Remote; remote-first setup with offices in Warsaw and Kyiv

Company

hirify.global is an agentic AI platform for creating, launching, and scaling paid ads for small and medium businesses, expanding into B2B solutions for enterprise marketing teams.

What you will do

• Secure the AWS-first cloud environment, including IAM, access management, secrets, hardening, and network security.
• Own SOC 2, ISO 27001, and CASA compliance initiatives by implementing controls, preparing evidence, and working with auditors.
• Build security into CI/CD through SAST, DAST, SCA, secrets scanning, and infrastructure-as-code checks.
• Find, prioritize, and fix product and infrastructure vulnerabilities; run incident response and establish monitoring and alerting.
• Define the security roadmap, review architecture and code, and guide DevOps and Platform teams on security policies and implementation.
• Support B2B clients with security questions, reviews, and due diligence.

Requirements

• 7+ years of experience in DevOps, Platform, or infrastructure engineering, including at least 4 years focused on DevSecOps, Cloud Security, or Security Engineering.
• Hands-on experience with both SOC 2 and ISO 27001, including preparing for, passing, or maintaining audits, understanding control requirements, and working with auditors.
• Strong hands-on experience with AWS and infrastructure as code using Terraform.
• Proven experience finding and fixing vulnerabilities and handling security incidents.
• Experience leading engineers or acting as a technical lead.
• AWS Professional-level certification; a security-focused Associate certification may also be considered.
• Upper-Intermediate (B2+) English or higher.
• Fluent Ukrainian.

Nice to have

• Backend development experience with Node.js, TypeScript, Java, C#/.NET, Go, or Python, or a career path from backend to DevOps/Platform to Security.
• Experience with CASA assessments and GDPR and/or CCPA (CPRA) requirements.
• Understanding of HIPAA or PCI DSS.
• Additional security certifications such as CISSP, OSCP, or CKS, or GCP certifications.

Culture & Benefits

• Remote-first work setup with offices in Warsaw and Kyiv.
• Security has strategic priority, with direct access to C-level co-founders and authority over technical decisions.
• Work with AI-powered tools and cutting-edge technologies.
• Regular performance reviews focused on transparent and rewarded growth.
• Stable, profitable company with international investors, 250+ specialists, and worldwide markets.

Hiring process

• Intro Call → Technical Interview → Final Interview → Reference Check → Offer.
• Submit a CV to apply.