Senior Cloud & Application Security Engineer (Cybersecurity)

Location: Irvine, California, United States; hybrid, with remote US-based candidates considered

Annual salary: $150,000–$220,000

Company

hirify.global provides an AI-driven analytics and orchestration platform plus high-speed Wi-Fi routers that help internet service providers manage and troubleshoot networks in real time.

What you will do

• Partner with Software Engineering, Cloud Operations, Platform Engineering, DevOps, QA, and Product teams to identify weaknesses, define controls, validate remediation, and improve secure development practices.
• Review application security findings, perform targeted manual reviews and threat modeling, and assess APIs, authentication, authorization, session management, cryptography, and secrets handling.
• Integrate security controls and automated testing into CI/CD pipelines, including source code, dependency, container, artifact integrity, signing, provenance, and supply-chain controls.
• Assess Kubernetes clusters, workloads, containers, cloud infrastructure, IAM, network segmentation, workload identities, secrets, runtime configuration, and infrastructure-as-code.
• Analyze vulnerabilities and CVEs, determine applicability, exploitability, exposure, severity, and impact, and validate remediation.
• Conduct security testing, support incident investigations, improve telemetry and detections, and mentor Security Champions through guidance, training, and reusable secure engineering patterns.

Requirements

• 5+ years of experience in application security, cloud security, security engineering, DevSecOps, penetration testing, platform engineering, or related technical roles.
• Strong knowledge of cloud-native application architectures, Kubernetes, and containers.
• Understanding of CI/CD pipelines and modern software development workflows.
• Experience with SAST, SCA, container scanning, dependency scanning, secret detection, and other application security testing tools.
• Strong understanding of common application vulnerabilities and secure coding practices.
• Experience evaluating REST APIs, service-to-service communications, authentication, authorization, and secrets handling.
• Experience with at least one major public cloud platform.
• Ability to analyze vulnerabilities, determine realistic exploitability and impact, and communicate effectively with developers and infrastructure engineers.

Nice to have

• Experience with Go, Java, Python, C/C++, or other cloud-native languages.
• Experience with GitLab Ultimate security functionality, Terraform, Helm, Kubernetes operators, or infrastructure-as-code.
• Experience with Azure, GCP, or OCI.
• Familiarity with service meshes, gRPC, message buses, distributed systems, and microservice architectures.
• Familiarity with OWASP ASVS, OWASP Top 10, CWE, CVSS, EPSS, KEV, and related vulnerability frameworks.
• Experience with Burp Suite, Nmap, Semgrep, Trivy, or equivalent security testing tools.
• OSCP, CSSLP, CCSP, GIAC, Kubernetes security certifications, or equivalent practical experience.

Culture & Benefits

• Hybrid work in Irvine, with consideration for remote candidates based in the United States.
• Collaboration across software engineering, cloud operations, platform engineering, DevOps, QA, Product, and Information Security.
• Equal-opportunity recruitment and an inclusive, diverse working environment.
• Visa sponsorship is not available for this role.