Security Architect (AI Security)

Location: Vilnius, with other location options in London, England, United Kingdom. Hybrid work with 3 days per week in the office.

Salary: €8,000–€10,000 gross per month.

Company

hirify.global is a digital health product company building an AI-powered, privacy-first and clinically backed health and fitness app used by millions of people worldwide.

What you will do

• Partner with engineering, product and platform teams to shape secure architectures, lead security design reviews, and document risk trade-offs.
• Build security harnesses for human and AI-agent development, including guardrails, sandboxing, least-privilege access, secrets handling, policy-as-code and automated checks.
• Define secure patterns for LLM integrations, MCP servers and tool use, addressing prompt injection, data leakage, excessive agency and supply-chain compromise.
• Publish reusable patterns, reference architectures and standards, and scale threat modelling through tools and engineer enablement.
• Automate vulnerability triage and investigation, identify systemic causes, and feed fixes into security patterns and guardrails.
• Advise engineering, product and leadership, evaluate third-party and AI tools, coach engineers, and support ISO 27001/27701 controls.

Requirements

• 7+ years of experience in security engineering, application or product security, or security architecture, including hands-on work securing cloud-native systems.
• Deep knowledge of Secure SDLC, including threat modelling, security testing, application security reviews and CI/CD security.
• Hands-on experience with AWS and Cloudflare or equivalent technologies, plus Terraform or similar infrastructure-as-code tools.
• Strong knowledge of the OWASP Top 10 and the ability to assess exploitability and impact.
• Solid coding skills in languages such as Python, Go or Scala, with experience building security tooling or automation.
• Practical understanding of AI-assisted and agentic development risks and LLM applications, including the OWASP Top 10 for LLMs.
• Experience with security risk analysis and risk management methods.
• Ability to explain trade-offs clearly to engineers and senior stakeholders and gain adoption of security practices.

Nice to have

• Experience building guardrails, sandboxes or policy-as-code, such as OPA, for developer platforms or AI coding agents.
• iOS or Android security experience.
• Experience with ISO 27001, ISO 27701 or SOC 2 audits.
• Background in health tech, femtech or another regulated, privacy-sensitive industry.
• Certifications or degrees such as CISSP, CCSP, OSCP or an MSc in Information Security.

Culture & Benefits

• Mission-led, product-driven environment with shared decisions, encouraged debate, ownership and a focus on purposeful delivery.
• In-person collaboration in a hybrid model, with 3 days per week in the office.
• Paid holiday, sick leave and female health leave, plus enhanced parental leave and pay.
• Professional growth through impactful work, learning support and annual salary reviews.
• Performance incentive scheme, a 5-week paid sabbatical after five years, Flo Premium for friends and family, and health, pension and wellbeing benefits.

Hiring process

• Applications are evaluated based on merit, skills and role-relevant experience.