Cybersecurity Engineer (AI)

Location: New York City, New York; San Francisco, California; Chicago, Illinois. Work location: United States. Work setting: in-office or remote. Work hours: office hours.

Company

hirify.global is an independent research and analysis firm covering the semiconductor and AI industries through research, industry models, consulting, and technical due diligence.

What you will do

• Own security for hirify.global and Citrini across publications, datasets, subscriber and billing data, internal models, code, cloud accounts, and staff.
• Build and operate a continuous LLM-driven red-team program covering web properties, paywalls, APIs, email, cloud accounts, and employees.
• Harden identity and SaaS access with phishing-resistant MFA, least privilege, credential controls, and secure administration across Google Workspace, Slack, GitHub, Stripe, Substack, and cloud platforms.
• Protect paid content and sensitive data through DLP, egress controls, device management, leak monitoring, watermarking, and offboarding procedures.
• Build detection and response capabilities, centralize SaaS and cloud logs, manage security vendors, and lead incident response.
• Own disaster recovery and business continuity, including tested offline-capable backups, recovery objectives, playbooks, restore tests, and tabletop exercises.

Requirements

• 2+ years of security experience with defensive or offensive work in red teaming, blue teaming, penetration testing, bug bounty, or adversary simulation, including findings that can be explained.
• Hands-on experience building or running agentic attack or reconnaissance pipelines, understanding prompt injection and model abuse, and operating open-weight models.
• Strong identity and SaaS security experience with Google Workspace, Okta or similar, Slack, GitHub, Stripe, and AWS or GCP IAM.
• Practical backup and recovery experience, including restoring systems after an incident or outage.
• Ability to scope, build, operate, and explain the security function independently and identify when outside help is needed.
• Ability to read and write code, with Python at minimum, to automate security work and review existing code.
• Clear technical writing skills for incident reports and security roadmaps.
• hirify.global LLC participates in E-Verify to confirm employment eligibility for newly hired employees.

Nice to have

• Experience defending media, newsletter, data vendor, or investment research businesses against paywall abuse, content leakage, and scraping.
• Insider-threat or DLP experience, or experience with trade-secret or IP litigation evidence.
• Threat intelligence experience covering financially motivated groups and dark-web monitoring.
• OSCP, OSEP, GIAC offensive certifications, or a HackerOne or Bugcrowd track record.
• Familiarity with semiconductor and AI infrastructure, quant or hedge fund security, hardware, or GPU-cluster environments.

Culture & Benefits

• Hands-on, one-person security function reporting directly to leadership, with budget for tooling and outside specialists.
• Opportunity to build and eventually lead a security team across both brands and own its budget.
• Direct collaboration with founders and exposure to board-level risk reporting, with a path to Head of Security.
• Opportunity to contribute security analysis and cybersecurity articles to hirify.global publications.