Вакансия из Hirify Global, списка международных tech-компаний Для мэтча и отклика нужен Plus
Пожаловаться
Зарплата и рынок
развернуть
$100к-200к/год
$190к$220кмедиана$250к
По похожим ролям (49) ~ $220к/год
На СНГ рынке: $4к/мес ($3.7к - $4.3к)
88
Хорошая вакансия
развернуть
Чётко описанная senior-роль даёт заметную самостоятельность в развивающемся AI-продукте, но небольшая команда и широкий круг задач потребуют работать сразу в нескольких направлениях безопасности.
?Широкая зона ответственности
Защита AI-систем
Заметное влияние
?Поездки в офис
Мэтч & Сопровод
Для мэтча с этой вакансией нужен Plus
Подключить Plus
Описание вакансии
Текст:
Hirify AI/Оригинал
TL;DR
Senior Security Engineer (AI/cybersecurity): Building security automation, purpose-built agents, and secure-by-default solutions for an AI-native identity security platform with an accent on application security, cloud security, and risk-based development lifecycle integration. Focus on designing threat models, securing AI-powered features and enterprise SaaS APIs, and leading systemic remediation across engineering teams.
Location: Remote with quarterly in-person participation at a primary office in San Francisco or Portland; listed offices are San Francisco, New York City, and Portland, United States.
Salary: $100K–$200K plus equity.
Company
hirify.global develops C1, an AI-native identity security platform for human, non-human, and AI identities, with automation, platform-level AI, access visibility, fine-grained controls, just-in-time access, and automated access reviews.
What you will do
Define security standards and secure-by-default solutions across application and cloud security.
Build agents, skills, tooling, and automation that integrate risk-based security review, triage, enrichment, detection, and observability into the development lifecycle.
Lead threat modeling and risk assessment for high-risk features, platform changes, agentic development practices, and AI-powered production features.
Partner with engineering on API security standards, security code reviews, critical-threat remediation, and secure implementation.
Identify systemic risks and lead multi-team remediation efforts from assessment through completion.
Contribute to SOC 2, ISO 27001/42001, cross-domain security and compliance initiatives, and the growth of security practices across engineering.
Requirements
Proven experience securing enterprise SaaS applications, including authentication flows, authorization patterns, and input validation at API boundaries.
Experience securing software and infrastructure deployment and change-management mechanisms.
Background in Software Engineering, Platform Engineering, Systems Engineering, Network Engineering, Cloud Security, or Application Security.
Hands-on code review experience, ideally in Go, Python, or Rust.
Experience with AWS or another major cloud provider and comfort working across cloud infrastructure.
Experience building agents and security automation that replace manual work, with examples or a walkthrough required during the process.
Ability to work independently and collaboratively in a fast-paced, high-growth environment.
Current knowledge of modern security practices, tooling, emerging threats, and AI’s impact on the threat landscape.
Quarterly in-person participation in San Francisco or Portland, Oregon is required.
Nice to have
Experience with Kubernetes, service mesh, or PKI/network technologies such as Consul, Envoy, Cilium, Vault, or Istio.
Experience building or extending internal security tooling, automations, or agents.
Prior experience at a high-growth SaaS or identity/access management company.
Culture & Benefits
Work on a small, early-stage security team with broad scope and meaningful ownership.
Opportunity to specialize while contributing across security engineering, application and cloud security, and compliance.
Competitive salary, meaningful equity, and comprehensive health benefits.
Focus on practical security results, sound judgment, and securing products and development workflows by default.
Hiring process
Provide one or more examples of an agent, skill, or automation that replaced manual security work, examples of AI coding or agentic workflows, or a live or recorded walkthrough describing the problem, approach, and impact.
Будьте осторожны
Если работодатель просит войти в их систему, используя iCloud/Google, прислать код/пароль, запустить код/ПО, не делайте этого. Это мошенники. Обязательно жмите «Пожаловаться» или пишите в поддержку. Подробнее в гайде →