Security Engineer (Cloud & AppSec)

Location: Remote within the United States; hybrid if local to San Mateo, California. Applicants must be authorized to work in the United States or eligible for a sponsorship path hirify.global can support.

Salary: $155,000–$190,000 per year.

Company

hirify.global develops non-invasive prescription therapies and connected medical-device technologies for chronic diseases, initially focusing on hand tremor and expanding into neurology and cardiology.

What you will do

• Architect, implement, and monitor AWS security controls, including GuardDuty, Inspector, Security Hub, IAM Access Analyzer, KMS, CloudTrail, IAM, VPC isolation, and encryption.
• Embed SAST, DAST, SCA, container scanning, and security gates into Jenkins, GitHub Actions, and other CI/CD workflows.
• Automate vulnerability triage, evidence collection, remediation workflows, and infrastructure security checks using Python or Bash.
• Review application code, cloud architectures, APIs, and pull requests for OWASP Top 10 vulnerabilities, authentication flaws, authorization issues, and logic bugs.
• Manage penetration tests and bug bounty findings, and partner with engineering teams on technical remediation.
• Support SOC 2 Type II and HIPAA audits, investigate AWS and production security alerts, and lead root-cause analysis with automated prevention measures.

Requirements

• 3+ years of hands-on experience in Cloud Security, Application Security, or DevSecOps within a production cloud-native engineering environment.
• Deep hands-on experience with AWS security services, including GuardDuty, Inspector, Security Hub, AWS Config, IAM policies, and VPC security.
• Experience integrating automated SAST, SCA, and container-scanning checks into Jenkins and modern CI systems such as GitHub Actions or GitLab CI.
• Direct experience implementing, maintaining, and collecting automated evidence for technical controls in SOC 2 Type II audits.
• Strong understanding of OWASP Top 10, CWE, secure authentication and authorization, and modern API security patterns.
• Proficiency in Python or Bash for automating security tooling, querying APIs, and parsing logs.
• Authorization to work full-time in the United States, or eligibility for a sponsorship path hirify.global can support.

Nice to have

• Experience with Infrastructure as Code and static analysis tools such as Terraform.
• Familiarity with Python or JavaScript used by the engineering team.
• Experience with IoT or connected-device ecosystems, including device provisioning, mutual TLS, secure key rotation, and OTA update pipelines.
• AWS Certified Security – Specialty, AWS Solutions Architect, OSCP, or equivalent practical certification.
• Familiarity with continuous compliance platforms such as Vanta.

Culture & Benefits

• Full-time, exempt employment embedded within the engineering organization and reporting to the Staff DevOps Engineer.
• Remote work within the United States, with hybrid work for candidates local to San Mateo.
• Access to tools, training, and mentoring.
• Compensation is adjusted based on experience, skills, market benchmarks, internal equity, and candidate location.
• Selection focuses on role requirements and supports diversity and equal opportunity.