Senior Security Engineer (AI)

Location: Hybrid in San Carlos, CA, United States, with 3+ days per week onsite and remote work on remaining days. All work must be performed in the United States.

Salary: $173K–$225K base annually, plus equity.

Company

hirify.global builds an AI platform for safer and more efficient aviation, delivering mission-critical systems for commercial airlines and Department of Defense customers.

What you will do

• Design and implement secure architectures across applications, cloud infrastructure, backend services, and in-cockpit edge systems.
• Protect sensitive data through access management, encryption, and secure data-handling controls.
• Identify and mitigate risks through vulnerability assessments, penetration testing, security reviews, and incident response.
• Integrate security into the SDLC through threat modeling, secure code review, and automated checks in CI/CD and infrastructure-as-code.
• Operate security monitoring and logging, and support detection and response to threats.
• Support FedRAMP and DoD authorization processes, CMMC 2.0 readiness, DFARS alignment, and security for LLM and retrieval-based AI features.

Requirements

• 5+ years of hands-on security engineering experience securing complex systems and data, including production cloud environments; AWS or AWS GovCloud experience is strongly preferred.
• Strong knowledge of security principles, threat modeling, and defensive security practices.
• Experience with SIEM, IDS/IPS, vulnerability scanning, encryption, and related security technologies.
• Familiarity with NIST 800-53/800-171, ISO 27001, and CMMC.
• Direct experience with FedRAMP authorization processes, including ATO, SSP, and POA&M, and/or DoD IL4/IL5 environments.
• Ability to establish security priorities from scratch, balance risk against a fast-moving product roadmap, and collaborate with software engineers on secure system design.
• Hands-on approach with strong analytical and problem-solving skills.
• Must be a U.S. Person: U.S. citizen, Green Card holder, lawful permanent resident, or person granted asylum or refugee status.
• Visa sponsorship and visa transfers are not available.

Nice to have

• Experience with aviation, aerospace, DoD customers, or ITAR-controlled environments.
• Familiarity with zero trust architectures, StateRAMP, IL5/IL6 systems, or classified/CUI handling.
• Experience securing iOS, embedded, mobile, or edge devices in disconnected or constrained environments.
• Security certifications such as CISSP, CISM, or CEH.
• Passion for improving air travel efficiency and safety.

Culture & Benefits

• Small, focused teams operate without heavy processes, own what they build, and ship quickly.
• Full-time employees receive medical premium coverage, with 100% covered for employees and 25% for dependents.
• Three weeks of PTO and 13+ paid company holidays.
• 401(k) is offered without a current employer match.
• Hybrid work includes remote work on days not spent onsite.