Вакансия из Hirify Global, списка международных tech-компаний Для мэтча и отклика нужен Plus
Пожаловаться
Зарплата и рынок
развернуть
$190к-239к/год
$190к$220кмедиана$260к
По похожим ролям (50) ~ $220к/год
На СНГ рынке: $4.2к/мес ($3к - $4.9к)
91
Крутая вакансия
развернуть
У роли четкая ответственность уровня Staff за важные задачи безопасности цепочки поставок, измеримые результаты и прямая связь с продуктом Company hidden; высокий порог опыта делает вакансию доступной не для всех.
?Высокие требования
Актуальные технологии
AI и безопасность
Понятный результат
Гибкие условия
Мэтч & Сопровод
Для мэтча с этой вакансией нужен Plus
Подключить Plus
Описание вакансии
Текст:
Hirify AI/Оригинал
TL;DR
Staff Software Engineer (AI/supply chain security): Building and operating vulnerability-remediation infrastructure for package builds and releases, including scanning, signing, SBOM generation, and VEX documentation with an accent on CVE remediation, compiled-language packaging, and platform reliability. Focus on leading complex ABI-sensitive fixes, automating remediation at scale, and improving security, observability, and release confidence across the package catalog.
Location: Remote (United States)
Base salary: $189,500–$238,500 per year, plus annual bonus potential, equity participation, and benefits.
Company
hirify.global develops an enterprise AI platform and open-source solutions for Python, data science, and AI, serving millions of users and enterprise customers.
What you will do
Set technical strategy for vulnerability remediation from CVE intake through release, making risk-based decisions on patching, backporting, upgrades, and mitigations.
Architect and build remediation infrastructure covering build and test pipelines, vulnerability scanning, signing, SBOM generation, and VEX documentation.
Lead remediation of critical CVEs involving deep dependency chains and ABI-sensitive packages.
Improve reliability, observability, access controls, and automation across build and release infrastructure.
Define remediation SLAs and metrics, write design documents, diagnose infrastructure failures, and guide cross-team implementation.
Partner with upstream open-source maintainers and use AI-powered development tools to accelerate triage, patch analysis, testing, and code review.
Requirements
10+ years of professional software engineering experience, including 5+ years in infrastructure, platform engineering, release engineering, or security remediation.
Strong Python expertise and deep experience with C/C++ or other compiled languages, native build systems, and ABI debugging.
Hands-on packaging and build experience with conda, Python wheels, or Linux distribution packaging.
Experience designing and operating CI/CD, build, or release infrastructure at scale with an SRE mindset.
Strong command of CVE/CVSS frameworks, exploitability analysis, vulnerability scanning, and supply chain security concepts including SBOM, VEX, SLSA, signing, and provenance.
Track record of leading large cross-team technical initiatives and influencing outcomes without direct authority.
Ability to communicate complex tradeoffs in design documents and technical reviews for technical and non-technical audiences.
Experience mentoring engineers at all levels and multiplying impact across teams.
Proficiency with AI-powered development tools while maintaining strong engineering fundamentals.
Nice to have
Upstream open-source contributions or maintainer experience in widely used projects.
Experience with AWS or Azure, Kubernetes, infrastructure as code, or GitOps tools such as ArgoCD.
Production experience building artifact signing, attestation, or provenance systems.
Experience in open-source, AI-focused, or data science companies, or fast-paced startup environments.
Constructive technical judgment, long-term risk awareness, and commitment to inclusive collaboration.
Culture & Benefits
Fully remote setup with flexible hours and a collaborative environment emphasizing clarity, candor, thoughtful discussion, and employee wellbeing.
Flexible vacation policy, medical, dental, and vision insurance.
Short-term and long-term disability coverage, paid parental leave, and a monthly wellness stipend.
Employee assistance and mental health resources, with opportunities for professional growth.
The application deadline is December 30, 2026; applications are reviewed on an ongoing basis until the role is filled.
Будьте осторожны
Если работодатель просит войти в их систему, используя iCloud/Google, прислать код/пароль, запустить код/ПО, не делайте этого. Это мошенники. Обязательно жмите «Пожаловаться» или пишите в поддержку. Подробнее в гайде →