Senior Security Engineer (AI/Cloud)

Location: Remote, Spain only

Company

hirify.global develops and operates a cloud-hosted platform supported by cloud, infrastructure, AI, and IT systems.

What you will do

• Design and improve cloud and infrastructure security architecture covering IAM, network segmentation, secrets management, encryption, and tenant isolation.
• Threat-model AI/ML and LLM features and internal tools, review AI vendors and services, and implement practical AI governance controls.
• Manage vulnerabilities across cloud workloads, servers, endpoints, containers, and applications from scanning through remediation.
• Investigate incidents, lead root-cause and post-incident reviews, and improve detection, monitoring, alerting, and runbooks.
• Automate evidence collection, vulnerability triage, alert enrichment, ticketing, reporting, and integrations between security tools and remediation teams.
• Support customer and regulatory security controls, compliance evidence, M&A integration, vendor separation, and risk reporting to leadership.

Requirements

• 5+ years of experience in security engineering, cloud security, infrastructure security, or platform security.
• Hands-on experience reviewing and hardening AWS and/or Azure cloud configurations.
• Experience with vulnerability management, including scanning, risk-based prioritization, and remediation tracking across cloud workloads, servers, endpoints, and containers.
• Experience investigating and documenting security incidents, performing root-cause analysis, and conducting post-incident reviews.
• Working knowledge of LLM and AI application development and deployment, including risks such as prompt injection, data exfiltration, excessive agency, and insecure output handling.
• Strong foundations in secure design, network security, IAM, and cryptography.
• Scripting or automation skills with Python, Bash, AI agents, or similar tools.
• Experience with at least one compliance framework, such as SOC 2, ISO 27001, FedRAMP/GovRAMP, NIST 800-53, or a similar framework.
• Clear communication with technical and non-technical audiences.

Nice to have

• AI governance or AI risk management experience, including ISO 42001, NIST AI RMF, or EU AI Act awareness.
• AI/ML red-teaming or adversarial testing experience.
• Experience with CSPM, SIEM, or EDR tooling.
• Windows and Linux server hardening and patch management experience.
• Experience supporting government, utility, or other regulated-industry customers.
• Relevant certifications such as CISSP, CCSP, AWS/Azure security, GIAC, or AI-security credentials.

Culture & Benefits

• Full-time remote work from Spain with flexible working hours.
• Competitive annual salary and an annual bonus based on individual performance and company results.
• Private health insurance and a flexible benefits plan.
• Inclusive environment valuing diverse experiences and career paths.