Manager, Security (AI)

Location: Hybrid, requiring 3 days per week in office, primarily in the New York City and Boston metro areas; applicants from the Research Triangle, NC, and San Francisco Bay Area may also be considered. Applicants must reside in these locations or be willing to relocate.

Total compensation range: $185,500–$232,000 annually, including base salary, equity, benefits, and perks.

Company

hirify.global is a technology- and AI-driven pharma company developing platforms and capabilities to accelerate drug development and clinical trials.

What you will do

• Lead incident response from triage and severity decisions through containment, recovery, communication, post-incident reviews, and corrective-action closure; participate in the on-call rotation.
• Review and improve data, cloud, application, corporate, architecture, configuration, code, and pipeline security across AWS and GCP.
• Protect regulated clinical, patient, and AI-system data through access, classification, handling, and sharing controls.
• Secure AI platforms and agentic workflows, including service identity, credentials, secrets, MCP connectors, tool permissions, and agent guardrails.
• Operate SIEM, EDR, vulnerability management, detection testing, tabletop exercises, control verification, and security automation.
• Own the security roadmap, tooling budget, vendors, quarterly reporting, governance, and hiring, coaching, and management of security engineers.

Requirements

• 5+ years in security engineering or security operations, with hands-on depth in data, cloud, and application security.
• Experience leading incident response to resolution and making independent severity decisions under pressure.
• Ability to read and write code and partner with engineers on secure design, remediation, and pipeline security.
• Daily use of AI tools and understanding of how to secure AI-enabled systems.
• Hands-on experience with SIEM, EDR, vulnerability management, and security automation.
• Experience owning security tooling, budgets, and vendor relationships.

Nice to have

• Direct people-management experience, including feedback, development, and hiring.
• Experience with agentic identity and security, MCP integrations, or citizen-built application governance.
• Experience in life sciences, healthcare, or fintech.
• Familiarity with HIPAA, GxP, and 21 CFR Part 11.

Culture & Benefits

• Security operates as an engineering partnership within an AI-native company.
• Work includes practical, lightweight governance supporting GxP, HIPAA, and 21 CFR Part 11 obligations.
• Hybrid work requires three office days per week in the primary hiring hubs.
• Compensation includes base salary, equity, comprehensive benefits, and generous perks.
• Success includes building sustainable on-call operations, measurable improvements in detection and remediation, and documented development plans for direct reports.