Senior Cyber Security Engineer (AI)

Location: Hybrid in Sacramento, California, United States; work from home up to 2 days per week

Salary: USD 155,390–189,140 per year

Company

hirify.global is a national insurance group with more than 50 years in business, focused on financial strength, integrity, customer service, and collaborative work.

What you will do

• Develop repeatable security architectures, standards, procedures, and technical control documentation with internal teams, business partners, and vendors.
• Design and maintain DevSecOps pipelines with SAST, DAST, SCA, container and image scanning, policy-as-code, infrastructure-as-code, and software supply-chain controls.
• Advance application and cloud security through secure code review, threat modeling, vulnerability remediation, and IaaS, PaaS, and SaaS security integration.
• Develop AI and agent security practices, including OWASP LLM Top 10 threat modeling, non-human identity and AI agent IAM policies, behavioral monitoring, and response to AI-specific incidents.
• Support SOC operations through detection engineering, SIEM/SOAR automation, EDR-based incident response, alert triage, case management, threat hunting, and cyber exercises.
• Perform vulnerability validation, host and network forensics, log and PCAP analysis, risk reporting, and mentoring of junior security staff.

Requirements

• At least eight years of experience in cloud security, IT security, or security operations.
• Bachelor’s degree in information/cyber security, information systems, computer science, information management, or a related discipline strongly preferred.
• At least one currently maintained and valid certification or advanced degree is required: CISSP, CCSP, CISM, CRISC, GCIH, an advanced InfoSec degree, Microsoft Cloud and AI Security Engineer, Associate Cybersecurity Architect Expert, or Azure Solutions Architect Expert.
• Experience with SIEM, vulnerability scanners, EDR, security auditing tools, and web application firewalls.
• Experience with SOC operations, incident response, alert triage, case management, SOAR or automation platforms, and CI/CD security integration.
• Knowledge of incident response, application and identity security, IAM, data handling, WAFs, firewalls, segmentation, cyber resiliency, secure coding, MFA, DLP, forensics, BCP/DR, and secure SDLC practices.
• Knowledge of NIST, CIS, OWASP, ITIL, Sarbanes-Oxley, and applicable auditing standards and government guidelines.
• Understanding of network, cloud, and application security, with scripting proficiency in Python and PowerShell.
• Working knowledge of AI/LLM security risks, OWASP LLM Top 10, non-human identity and agent IAM concepts; regulatory knowledge covering CCPA, GDPR, HIPAA, SOX IT, GCC, and FCC requirements.

Nice to have

• DevSecOps, cloud security, application security, OSCP, GWEB, GCSA, AWS/Azure Security Specialty, or emerging AI security certifications.
• Hands-on fluency with AI assistant tools for threat analysis, detection rule generation, and security documentation.
• Additional expertise in Kubernetes, Terraform, ARM, SBOM, dependency management, API security, secure code review, AI platform integration, and model or prompt-level risk assessment.

Culture & Benefits

• Hybrid work arrangement with a Work From Home Program of up to two days per week.
• Paid time off, paid holidays, and a paid community volunteer day.
• Immediate vesting of retirement savings with company match.
• Medical, dental, vision, life, AD&D, long-term disability, hospital indemnity, accident, critical illness, and flexible savings benefits.
• Tuition reimbursement, employee assistance, employee referral, and diversity, equity, and inclusion programs.
• Collaborative, approachable workplace centered on integrity, customer focus, curiosity, and respectful relationships.