Senior Security Analyst (AI Security)

Location: Remote; can be based anywhere in the US. Mandatory all-company meetings several times a year and required team travel as necessary; up to 15 travel days per year.

Base salary: $130,000–$190,000 annually, depending on experience.

Company

hirify.global provides integrated learning software, curated and customizable content, and expert services to help organizations build human and AI capabilities.

What you will do

• Own external and continuous penetration testing programs, including vendor selection, scope, oversight, remediation validation, reporting, automation, threat modeling, and targeted validation.
• Build and operate vulnerability management, bug bounty, triage, remediation, and security finding workflows across Engineering, DevOps, IT, Product Engineering, and Compliance.
• Develop Python, API, and Make automations to collect threat intelligence, validate security baselines, and detect drift across AWS, GCP, GitHub, and SaaS platforms.
• Lead AI security practices, including secure usage patterns, AI and application baselines, AI security governance, and controls aligned with OWASP Top 10 for LLMs and AI systems and ISO 42001.
• Improve Drata evidence collection, control mapping, and compliance pipelines while providing technical support for audits aligned with ISO 27001, ISO 27701, and ISO 42001.
• Support vendor reviews, customer security questionnaires, secure development practices, CI/CD security controls, cloud security baselines, and long-term security strategy.

Requirements

• Proven career experience owning penetration testing programs.
• Proven experience building vulnerability management systems and implementing security automation.
• Experience helping organizations adopt modern technologies, including AI, securely and responsibly.
• Ability to translate complex security risks into practical, scalable solutions and implementation-level guidance.
• Experience partnering cross-functionally with Engineering, DevOps, IT, Product Engineering, Compliance, and leadership.
• Ability to develop durable security improvements, identify systemic risks and recurring vulnerability patterns, and support audit readiness.
• Self-starter with a track record of delivering excellent results; the role requires up to 15 days of travel per year.

Culture & Benefits

• Remote-first work model with mandatory all-company meetings several times a year and required team travel as necessary.
• Comprehensive medical, dental, and vision coverage, flexible paid time off, paid time off, and 401(k) matching.
• Incentive stock options, volunteer time off, Employee Resource Groups, and professional development support with dedicated annual learning time.
• Daily use of AI tools with hands-on training and clear guardrails for responsible experimentation.
• Equal opportunity workplace committed to inclusion, diversity, and reasonable accommodations.