Staff Software Engineer (AI Security)

Location: United States - Remote

Base salary: $205,000–$231,000 USD annually

Company

hirify.global delivers hardened, secure, production-ready builds of open source software and develops products for software supply-chain security.

What you will do

• Own major parts of hirify.global Harness end to end, from system design and implementation through rollout and operation.
• Build security into the product foundation through customer-code protection, least-privilege access, auditing, threat modeling, and security reviews.
• Make Harness reliable, observable, production-grade, and scalable while managing tradeoffs around cost, technical debt, and build versus buy.
• Work directly with customers, Product, Security, and the field team to turn feedback into the roadmap.
• Raise the engineering bar through design documents, code reviews, mentoring, and practical use of AI tooling.

Requirements

• 10+ years of software development experience.
• Track record of building and operating production services where security and data confidentiality were hard requirements.
• Experience designing systems that handle confidential customer data end to end.
• Experience shipping software into air-gapped, disconnected, or highly restricted environments.
• Deep experience with GCP and/or AWS cloud infrastructure, including IAM, KMS, networking, and Terraform-based infrastructure as code.
• Hands-on experience with virtualization and workload isolation, such as KVM, QEMU, Firecracker, Cloud Hypervisor, gVisor, nested virtualization, or bare-metal hosts.
• Working knowledge of applied cryptography, including envelope encryption, key management and rotation, HSM/KMS-backed keys, and signing.
• Proficiency with Go and experience with AI tooling; experience building agentic systems is a plus.
• Strong communication skills, proficiency in English, autonomy, initiative, and the ability to explain security models to engineers, security reviewers, and customer CISOs.

Nice to have

• Background in offensive security, vulnerability research, penetration testing, or application security.
• Experience running arbitrary third-party code across many languages and build systems.
• Familiarity with CVE and OSV formats, vulnerability triage and deduplication, and coordinated disclosure.
• Experience distributing self-hosted software using Kubernetes, Helm, signed artifacts, SBOMs, and supply-chain provenance.
• Experience with GitHub or GitLab app integrations.
• Experience evaluating LLM output quality and managing model cost at scale.

Culture & Benefits

• Remote-first culture with team meetups, bi-annual destination summits, and a monthly coworking, phone, and internet stipend.
• Stock options upon hire and promotion, secondary offering participation, and a 10-year exercise period.
• 100% company-paid health, vision, and dental insurance premiums for employees and dependents.
• Flexible time off and paid parental leave of 18 weeks for birthing parents and 12 weeks for non-birthing parents.
• Customer-focused, intentional, transparent culture with a bias toward action and high standards for security and engineering quality.

Hiring process

• Include the word “DiscoTech” in the resume.
• Applicants whose experience is close to, but does not fully meet, the requirements are encouraged to apply.