AI & Automation Engineer (Cybersecurity)

Location: Remote within Romania; candidates must reside in and be authorized to work in Romania.

Company

hirify.global develops cybersecurity products and services for threat intelligence, managed detection and response, and security operations.

What you will do

• Lead complex AI automation initiatives across Security Operations Center workflows and security services.
• Design reusable architectures for LLM agents, retrieval-augmented generation, tool integrations, and deterministic or model-driven approaches.
• Establish evaluation methods and release criteria covering factual accuracy, reliability, false positives, regressions, security, latency, and cost.
• Design controls for least-privilege access, sensitive data, prompt injection, output validation, and analyst approval of high-impact response actions.
• Lead integrations with SIEM, SOAR, XDR/EDR, threat intelligence, and case-management systems while addressing scale, API failures, and service dependencies.
• Improve Python components, testing, CI/CD, observability, rollback, reliability, and measurable workflow outcomes; lead design reviews and coach engineers.

Requirements

• 7+ years of production software development experience, including 2+ years with LLMs, agents, or applied ML and 1+ year in or alongside a SOC or security team.
• Deep Python and API engineering skills, including evaluating OpenAI, Anthropic, and open-source models for production use.
• Experience leading architecture and delivery across multiple workflows or services, with reusable designs adopted by other engineers.
• Experience defining AI evaluation and release criteria, diagnosing systemic failure modes, and balancing quality, security, latency, and cost.
• Strong security operations knowledge and experience designing secure integrations, handling evidence, and providing appropriate analyst oversight for automated response.
• Experience designing and operating distributed or event-driven cloud services, including testing, CI/CD, observability, resilience, and production incident resolution.
• Ability to turn ambiguous needs into technical plans, influence cross-team decisions, coach senior engineers, and remain hands-on.

Nice to have

• Experience with SQL, Taegis, Sigma detection rules, or mapping detections to MITRE ATT&CK.
• Experience with vector databases, hybrid retrieval, model fine-tuning, or agent orchestration frameworks.
• Background in incident response, network traffic analysis, or Windows event log analysis.
• Experience with containerized or event-driven services, or open-source contributions in security or ML tooling.

Culture & Benefits

• Full-time remote work within Romania, with collaboration across locations and time zones.
• Flexible ways of working are supported, with remote and hybrid roles across hirify.global.
• Inclusive workplace focused on diverse experiences, perspectives, and backgrounds.
• Equal employment opportunities are provided based on job-related skills, qualifications, and experience.
• Reasonable accommodation is available during the recruitment process upon request.