Назад
Company hidden
4 дня назад

Staff Security Engineer (AI)

Формат работы
remote (только Europe)
Тип работы
fulltime
Грейд
senior
Английский
b2
Страна
Europe
Вакансия из списка Hirify.GlobalВакансия из Hirify RU Global, списка компаний с восточно-европейскими корнями
Для мэтча и отклика нужен Plus

Мэтч & Сопровод

Для мэтча с этой вакансией нужен Plus

Описание вакансии

Текст:
/
TL;DR
Staff Security Engineer (AI/security): Building automated security controls and defenses for AI agents that read untrusted content, execute code, and handle credentials, with an accent on application security, cloud infrastructure, and secure delivery. Focus on penetration testing, agent-specific red teaming, vulnerability detection, incident response, and preventing prompt injection, data exfiltration, cross-session access, and insecure agent-written code from reaching production.

Location: Europe, Remote. Remote-first work is available, with a Barcelona hub for weekly co-working.

Company

hirify.global builds and orchestrates AI agents that deliver code, research, operations, and other knowledge-work outcomes.

What you will do

  • Set security priorities and drive remediation through verified completion.
  • Identify application vulnerabilities through code review, penetration testing, and agent-specific red-team exercises.
  • Harden cloud infrastructure and integrate security controls into delivery pipelines with ITOps, platform, and product engineers.
  • Build detection for user and agent activity and lead incident response.
  • Address risks involving prompt injection, data exfiltration, cross-session access, and insecure agent-written code reaching production.

Requirements

  • Strong application security experience with the ability to identify exploitable flaws and explain fixes.
  • Hands-on penetration testing and offensive security experience across web applications, APIs, and cloud infrastructure.
  • Solid infrastructure and cloud security fundamentals, including IAM, network segmentation, containers and isolation, secrets management, and logging.
  • Experience building detections and conducting incident response.
  • Fluency with AI coding agents and LLM-based systems, including how they work, fail, and can be manipulated.
  • Software engineering skills sufficient to build tooling, automation, and test harnesses.
  • Sound judgment under pressure, including weighing security risks against releases and explaining decisions to engineers and founders.

Nice to have

  • Experience securing sandboxed or multi-tenant code execution environments.
  • Red-team, bug bounty, or CTF experience.
  • Experience with security programs and compliance frameworks such as ISO 27001 and SOC 2 in a small company.

Culture & Benefits

  • Remote-first work with global hiring focused on talent over location.
  • Barcelona hub with weekly co-working for those who prefer in-person collaboration.
  • Small, flat team with autonomy, broad ownership, and direct collaboration with senior teammates and the founder.
  • Equity and the opportunity to work on an AI-first product used internally by the team.

Будьте осторожны

Если работодатель просит войти в их систему, используя iCloud/Google, прислать код/пароль, запустить код/ПО, не делайте этого. Это мошенники. Обязательно жмите «Пожаловаться» или пишите в поддержку. Подробнее в гайде →