Security Engineer, Vulnerability Management

Location: Remote in the United States or Canada

Salary: $200K–$300K plus equity

Company

hirify.global builds infrastructure for voice-driven computing, enabling developers to build, deploy, scale, and observe production voice AI agents.

What you will do

• Select, deploy, and operationalize scanning tools across production assets.
• Own vulnerability management end to end, including triage, severity assessment, ownership, remediation SLAs, and reporting.
• Build engineering-first triage and remediation workflows with automated routing and follow-up.
• Build a remediation dashboard used by engineering and leadership.
• Automate collection of vulnerability management evidence for compliance programs in partnership with Compliance.
• Build automation, including agentic tooling, to reduce manual security operations work.

Requirements

• 5+ years of experience in security engineering, security operations, or software engineering, with a significant share focused on security.
• Hands-on experience building or running a vulnerability management program or software security tooling, including SCA, container, cloud, or host scanning.
• Engineering-first approach to triage and remediation, with the ability to make fixes easy for engineering teams to ship.
• Ability to assess a finding's real severity in the operating environment, using CVSS as one input.
• Strong scripting and automation skills in Go, Python, or a similar language.
• Comfort reading infrastructure as code such as Terraform.
• Pragmatic risk judgment and the ability to explain business impact and remediation urgency.
• Ability to explain complex technical concepts clearly, learn quickly, and work effectively in ambiguity.

Nice to have

• Experience with real-time media, networking, or WebRTC systems.
• Experience supporting HIPAA, PCI-DSS, ISO 27001, or SOC 2 compliance audits.
• Incident response or application security experience.
• AI security experience, such as securing LLM applications or agent infrastructure.

Culture & Benefits

• Remote work in the United States or Canada.
• Opportunity to shape an early vulnerability management and security operations program within a small Trust team covering security, IT, and compliance.
• Opportunity to contribute to open source alongside experienced engineers.
• Health, dental, and vision benefits.
• Flexible vacation policy and equity package.