Senior Software Engineer (Security)

Location: Remote (United States)

Base salary: $149,500–$179,500 annually, plus annual bonus potential, equity participation, and benefits.

Company

hirify.global develops an enterprise AI platform for sourcing, securing, building, and deploying Python, data science, and AI solutions at open-source scale.

What you will do

• Lead remediation of high-severity and complex CVEs, including deep dependency chains and ABI-sensitive packages requiring native-code debugging.
• Make risk-based decisions on patching, backporting, upgrading, or mitigating vulnerabilities, and communicate tradeoffs to Security, Support, Product, and leadership.
• Design automation for CVE intake, package mapping, patching workflows, testing pipelines, and SBOM/VEX generation.
• Define remediation SLAs, metrics, and reporting for exposure and time-to-remediate visibility.
• Partner with upstream maintainers on fixes, review patches, and coach engineers on security, correctness, and maintainable design.
• Write design documentation and use AI-powered development tools to accelerate triage, patch analysis, and testing while preserving engineering and security rigor.

Requirements

• 7+ years of professional software engineering experience, including 3+ years in security remediation, packaging, or release engineering.
• Strong Python expertise and deep experience with C/C++ or an equivalent compiled language, including native build and ABI debugging.
• Expert-level packaging and build experience with conda, wheels, or Linux distribution packaging systems.
• Strong command of CVE/CVSS frameworks, exploitability analysis, and vulnerability scanning tools.
• Experience designing automation that reduces manual toil at scale.
• Ability to write design documents and code reviews that clearly communicate tradeoffs to technical and non-technical audiences.
• Track record of coaching or mentoring engineers at any level.
• Proficiency with AI-powered development tools while maintaining strong engineering and security fundamentals.

Nice to have

• Upstream open-source contributions and hands-on CVE remediation in public package ecosystems.
• Supply chain security experience with SBOM, SLSA, signing, or provenance tooling.
• Experience with open-source ecosystems, package management, or build and release engineering in fast-paced technical environments.
• Production experience with cloud platforms, containers, or GitOps tooling.
• Experience at an AI-focused or data science company serving automated workloads at scale.
• Ability to challenge timing and tradeoffs and advocate for investments that reduce risk and single points of failure.

Culture & Benefits

• Full-time position in a high-performance environment with recognition for results.
• Fully remote setup with flexible hours and a focus on employee wellbeing and growth.
• Collaborative culture emphasizing diverse, thoughtful discussion, clarity, candor, and shared ownership.
• Flexible vacation policy, medical, dental, and vision insurance, short- and long-term disability coverage, and paid parental leave.
• Monthly wellness stipend, employee assistance program, and mental health resources.

Hiring process

• Applications are reviewed on an ongoing basis until the role is filled; the stated application deadline is December 30, 2026.