AI and Automation Engineer (Cybersecurity)

Location: Remote within Canada; candidates must reside in and be authorized to work in Canada.

Salary: CA$86,000–CA$143,000 base salary annually, plus bonus eligibility and benefits.

Company

hirify.global develops cybersecurity products and services, including threat intelligence, managed detection and response, and security operations solutions.

What you will do

• Design, build, operate, and independently deliver AI automation for security service use cases.
• Develop agent workflows and retrieval-augmented generation pipelines grounded in security telemetry, threat intelligence, and analyst runbooks.
• Build secure REST API and event-driven integrations with SIEM, SOAR, XDR/EDR, threat intelligence, and case management platforms.
• Define evaluation criteria and test factual accuracy, missed threats, false positives, regressions, and prompt-injection resistance.
• Ship tested Python services through code review and CI/CD; own monitoring, troubleshooting, failure handling, and rollback.
• Measure workflow quality, effort reduction, latency, cost, and success, while coordinating with Security Operations, Threat Research, Data Science, and DevOps.

Requirements

• 5+ years of production software development experience, including 1+ year with LLMs, agents, or applied ML and 1+ year in or alongside a SOC or security team.
• Strong Python, REST API, and JSON skills, with experience using OpenAI, Anthropic, or open-source models.
• Experience independently delivering complex retrieval pipelines, evaluation frameworks, or agent workflows from design through production.
• Ability to evaluate AI quality with noisy or incomplete labels, investigate failure modes, and explain model and retrieval tradeoffs.
• Experience integrating security platforms, handling telemetry securely, and applying SOC triage, investigation, and incident response concepts.
• Hands-on experience with Git, automated testing, CI/CD, cloud deployment, and production troubleshooting in AWS, Azure, GCP, or a comparable environment.
• Clear technical communication, sound risk judgment, and experience improving peers’ work through reviews or mentoring.
• Experience with SQL, Taegis, Sigma detection rules, or mapping detections to MITRE ATT&CK.
• Experience with vector databases, hybrid retrieval, model fine-tuning, agent orchestration frameworks, incident response, network traffic analysis, Windows event log analysis, containerized or event-driven services, or open-source security and ML tooling.

Culture & Benefits

• Remote work is available within the specified location, with collaboration across locations and time zones.
• Full-time employment with bonus eligibility and a comprehensive benefits package.
• Inclusive workplace committed to equal employment opportunities and supporting diverse experiences and perspectives.
• Reasonable accommodation is available during the recruitment process.