Senior Corporate Security Engineer (AI Security)

Location: Hybrid schedule of 4 days per week in the Nashville, Tennessee office; candidates must live within 75 minutes' commuting distance.

Salary: $180,000–$240,000 annual target base compensation, determined by location, experience, leveling, expertise, internal pay equity, and other business considerations.

Company

hirify.global provides personalized virtual behavioral healthcare for people navigating mental health conditions, substance use disorders, and eating disorders.

What you will do

• Design, build, and operate security controls for corporate systems, workforce platforms, endpoints, SaaS applications, cloud-connected services, and internal operations.
• Improve identity and access controls, including MFA, conditional access, device trust, privileged access, least privilege, service accounts, and lifecycle automation.
• Strengthen endpoint, SaaS, cloud, detection, response, and vulnerability-management capabilities across Mac, Windows, mobile, BYOD, AWS, and enterprise platforms.
• Secure AI tools, LLM platforms, AI agents, and AI-enabled workflows through access governance, logging, usage monitoring, prompt-layer security, and data protection.
• Build DLP controls, security automations, reporting, dashboards, runbooks, response workflows, and audit evidence collection using APIs, scripting, webhooks, and infrastructure as code.
• Partner with IT, Engineering, Information Security, Compliance, Legal, and business stakeholders to reduce risk and improve control maturity under regulated requirements.

Requirements

• 5+ years of experience in security engineering, corporate security, infrastructure security, enterprise security, IT security, cloud security, or a related technical discipline.
• Deep hands-on experience designing, building, and operating technical security controls in enterprise environments across identity, endpoints, SaaS, collaboration tools, cloud-connected services, and internal systems.
• Strong experience with IAM concepts, including MFA, conditional access, privileged access, lifecycle automation, service accounts, and least privilege.
• Experience with MDR, EDR, SIEM, cloud security, endpoint management, vulnerability management, or DLP tools, including platforms such as Expel MDR, SentinelOne, Wiz, CloudTrail, Sumo Logic, or similar.
• Experience with endpoint security, MDM, secure configuration management, and vulnerability remediation across Mac, Windows, or mobile environments.
• Experience using Python, Bash, PowerShell, Workato, Terraform, REST APIs, webhooks, JSON, scripting, or automation tools.
• Familiarity with detection engineering, alert tuning, incident response workflows, security operations, Zero Trust, identity-centric security, device trust, and secure system design.
• Ability to work cross-functionally, document effectively, demonstrate ownership and judgment, and operate independently in ambiguous environments.
• Must work four days per week from the Nashville office and live within 75 minutes' commuting distance.

Nice to have

• Staff Engineer or senior technical leadership experience.
• Experience in healthcare, financial services, or other regulated environments and with HIPAA, SOC 2, NIST, ISO 27001, or similar frameworks.
• Experience securing enterprise AI tools, LLM platforms, AI agents, AI-enabled workflows, or AI security products such as OpenAI, Anthropic, LiteLLM, Prompt Security, or Pillar.
• Experience with DLP, CASB, SSPM, browser security, SaaS posture management, data discovery, Google Workspace, Okta, Jamf, Microsoft Intune, GitHub, Slack, Atlassian, or AWS.
• Experience partnering with managed security providers, MDR teams, external auditors, or compliance teams.
• Familiarity with AI security risks including sensitive data exposure, prompt injection, model access control, third-party plugin risk, and AI system logging.

Culture & Benefits

• Full-time employees receive comprehensive benefits.
• Security is treated as an engineering discipline focused on ownership, measurable outcomes, automation, reliability, secure-by-design implementation, and continuous improvement.
• The role supports security controls aligned with HIPAA, SOC 2, NIST, Zero Trust principles, ISO 27001, and other applicable regulatory and contractual requirements.
• Company values include connection, evidence-based curiosity, urgency, and commitment to improving access to behavioral healthcare.