Security Engineer (AI)

Location: San Francisco or remote within the US

Salary: $160,000–$210,000 USD total target cash compensation

Company

hirify.global provides a product intelligence and analytics platform used by more than 29,000 companies, combining product analytics with AI to help teams understand user behavior and make product decisions.

What you will do

• Run vulnerability management by triaging scanner, penetration test, bug bounty, and dependency findings; validate exploitability and impact, assign severity, and track remediation through closure within SLA.
• Build, tune, and maintain SIEM detections across cloud, identity, endpoint, and application logs while reducing false positives.
• Use AI tools such as Claude Code to accelerate alert triage, investigation enrichment, detection development and testing, and repetitive SecOps automation.
• Investigate security incidents through containment, eradication, and recovery, and document post-incident reviews and follow-up actions.
• Identify logging and detection coverage gaps, onboard new sources, maintain runbooks, and participate in the security on-call rotation.

Requirements

• 3–5 years of experience in security engineering, security operations, detection and response, or a related role.
• Hands-on vulnerability management experience, including triaging and validating scanner and penetration test findings and coordinating remediation with engineers.
• Experience with a SIEM such as Splunk, Google SecOps/Chronicle, Panther, or Elastic, including writing queries and building or tuning detections.
• Experience investigating and responding to security incidents, with knowledge of common attack techniques and detection approaches such as MITRE ATT&CK.
• Working knowledge of cloud security in GCP or AWS, including IAM, audit logging, and common misconfigurations.
• Scripting skills in Python, Go, or a similar language for task automation and log-data processing.
• Hands-on experience with AI tools for security workflow automation, or a strong interest in developing this skill.
• Sound judgment in assessing severity and risk, escalating appropriately, explaining security issues clearly to engineers, and managing concurrent work independently.
• Must be based in the United States or work remotely from the US.

Nice to have

• Experience with detection-as-code, Sigma rules, and version-controlled detections with CI testing.
• Experience with EDR tools such as CrowdStrike or SentinelOne.
• Experience with SOAR or workflow automation platforms such as Tines or Torq.
• Experience with Kubernetes and container security.
• Experience running or supporting a bug bounty program.
• GCIH, GCIA, GCFA, OSCP, or a similar certification.

Culture & Benefits

• Defined security engineering career path toward Senior Security Engineer responsibilities.
• Medical, vision, and dental insurance, including additional US benefits such as pre-tax benefits and 401(k).
• Mental wellness benefit, generous vacation, additional company holidays, enhanced parental leave, and volunteer time off.
• Participation in a security on-call rotation is required.
• Culture emphasizes bold decision-making, rigorous insight, cross-functional collaboration, candid communication, customer focus, and simplicity.