Senior Security Engineer (AI/Healthcare)

Location: Fully remote; work mostly async in the timezone of your choice, with availability until midday Pacific Time for calls as needed.

Salary: $150,000–$250,000 per year, including equity.

Company

hirify.global is building a full-stack AI doctor and operates Bolt Pharmacy and Bolt Med across the healthcare market.

What you will do

• Own identity access systems, including SSO, SCIM, MFA, conditional access, device-aware policies, and joiner, mover, and leaver lifecycle management.
• Manage fleet security through device enrollment, encryption, patching, configuration baselines, remote lock and wipe, and endpoint detection and response.
• Define logging requirements, write and tune attacker-behavior detections, automate responses, and act as a first responder for security incidents.
• Partner with engineering on cloud identity, logging, and access security across AWS, GCP, or Azure.
• Build scripts and AI agents to automate repeatable security and IT work.
• Own onboarding and offboarding, IT operations, vendor and MSP management, and escalation support across the distributed team.

Requirements

• 6+ years of security engineering experience with hands-on depth across identity, endpoint security, and detection.
• Hands-on experience running an identity provider with SSO, SCIM, conditional access, and device-aware policies.
• Experience running MDM/UEM at scale, including enrollment, encryption, and remote wipe.
• Experience operating EDR and handling endpoint incidents from alert to containment.
• Experience writing and tuning detections, including explaining what a detection caught and how false positives were reduced.
• Attacker experience through red teaming, penetration testing, bug bounties, CTFs, or similar work.
• Ability to script and automate with Python, Bash, or similar tools, and current use of AI agents for work.
• Cloud security knowledge sufficient to partner with engineers on identity, logging, and access.
• Experience owning onboarding, offboarding, and IT operations for a distributed team, including external vendor or MSP management.
• Ability to explain security risk clearly to employees, engineers, and executives.

Nice to have

• Healthcare or other regulated-environment experience, including HIPAA, GDPR, or PCI.
• Experience owning identity or device programs through hypergrowth.
• Experience securing a distributed, multi-country workforce.
• Publicly shipped tools, detections, write-ups, talks, or CVEs.

Culture & Benefits

• Full-time individual contributor role with no management responsibilities, reporting directly to the Head of Information Security.
• Fully remote, async-first work with flexible scheduling and a kid-friendly environment.
• Comprehensive medical insurance where appropriate, PTO with a yearly minimum of at least two weeks plus local national holidays, and work-from-home equipment including a MacBook as needed.
• Annual budgets of $1,200 for personal development and $1,200 for personal wellness.
• Early-stage equity, free GLP-1 clinic membership, and biweekly health and work coaching.
• High-intensity culture focused on integrity, urgency, technical excellence, candor, frugality, and long-term customer value.