Назад
Company hidden
18 часов назад

Staff Software Engineer (AI)

189 500 - 238 500$
Формат работы
remote (только USA)
Тип работы
fulltime
Грейд
senior
Английский
b2
Страна
US
Вакансия из списка Hirify.GlobalВакансия из Hirify Global, списка международных tech-компаний
Для мэтча и отклика нужен Plus

Мэтч & Сопровод

Для мэтча с этой вакансией нужен Plus

Описание вакансии

Текст:
/
TL;DR
Staff Software Engineer (AI/supply chain security): Building and operating vulnerability-remediation infrastructure for package builds and releases, including scanning, signing, SBOM generation, and VEX documentation with an accent on CVE remediation, compiled-language packaging, and platform reliability. Focus on leading complex ABI-sensitive fixes, automating remediation at scale, and improving security, observability, and release confidence across the package catalog.

Location: Remote (United States)

Base salary: $189,500–$238,500 per year, plus annual bonus potential, equity participation, and benefits.

Company

hirify.global develops an enterprise AI platform and open-source solutions for Python, data science, and AI, serving millions of users and enterprise customers.

What you will do

  • Set technical strategy for vulnerability remediation from CVE intake through release, making risk-based decisions on patching, backporting, upgrades, and mitigations.
  • Architect and build remediation infrastructure covering build and test pipelines, vulnerability scanning, signing, SBOM generation, and VEX documentation.
  • Lead remediation of critical CVEs involving deep dependency chains and ABI-sensitive packages.
  • Improve reliability, observability, access controls, and automation across build and release infrastructure.
  • Define remediation SLAs and metrics, write design documents, diagnose infrastructure failures, and guide cross-team implementation.
  • Partner with upstream open-source maintainers and use AI-powered development tools to accelerate triage, patch analysis, testing, and code review.

Requirements

  • 10+ years of professional software engineering experience, including 5+ years in infrastructure, platform engineering, release engineering, or security remediation.
  • Strong Python expertise and deep experience with C/C++ or other compiled languages, native build systems, and ABI debugging.
  • Hands-on packaging and build experience with conda, Python wheels, or Linux distribution packaging.
  • Experience designing and operating CI/CD, build, or release infrastructure at scale with an SRE mindset.
  • Strong command of CVE/CVSS frameworks, exploitability analysis, vulnerability scanning, and supply chain security concepts including SBOM, VEX, SLSA, signing, and provenance.
  • Track record of leading large cross-team technical initiatives and influencing outcomes without direct authority.
  • Ability to communicate complex tradeoffs in design documents and technical reviews for technical and non-technical audiences.
  • Experience mentoring engineers at all levels and multiplying impact across teams.
  • Proficiency with AI-powered development tools while maintaining strong engineering fundamentals.

Nice to have

  • Upstream open-source contributions or maintainer experience in widely used projects.
  • Experience with AWS or Azure, Kubernetes, infrastructure as code, or GitOps tools such as ArgoCD.
  • Production experience building artifact signing, attestation, or provenance systems.
  • Experience in open-source, AI-focused, or data science companies, or fast-paced startup environments.
  • Constructive technical judgment, long-term risk awareness, and commitment to inclusive collaboration.

Culture & Benefits

  • Fully remote setup with flexible hours and a collaborative environment emphasizing clarity, candor, thoughtful discussion, and employee wellbeing.
  • Flexible vacation policy, medical, dental, and vision insurance.
  • Short-term and long-term disability coverage, paid parental leave, and a monthly wellness stipend.
  • Employee assistance and mental health resources, with opportunities for professional growth.
  • The application deadline is December 30, 2026; applications are reviewed on an ongoing basis until the role is filled.

Будьте осторожны

Если работодатель просит войти в их систему, используя iCloud/Google, прислать код/пароль, запустить код/ПО, не делайте этого. Это мошенники. Обязательно жмите «Пожаловаться» или пишите в поддержку. Подробнее в гайде →