Full Stack Security Engineer (Application & Product Security)

Location: Remote - USA

Base pay: $152,000–$220,000 per year

Company

hirify.global is an AI Developer Cloud providing infrastructure for developers to experiment with, train, fine-tune, deploy, and scale AI models.

What you will do

• Lead threat modeling, architecture reviews, and code reviews for web applications, APIs, and microservices.
• Write and commit fixes for security vulnerabilities in Python, Go, and JavaScript/TypeScript codebases.
• Implement, tune, and manage SAST, DAST, and SCA tooling in CI/CD pipelines.
• Configure application-layer defenses including WAF, bot protection, and API gateways.
• Provide secure coding guidance, training, and standard operating procedures to engineering teams.
• Collaborate on SOC 2, ISO 27001, and GDPR adherence and participate in bug bounty triage.

Requirements

• 5+ years of experience in application security, product security, or software engineering with a heavy security focus.
• Strong programming and code-review skills in Python, Go, JavaScript/TypeScript, or similar modern stacks.
• Deep knowledge of web application vulnerabilities, including OWASP Top 10, API security for REST/GraphQL, and OAuth, OIDC, and JWT authentication flows.
• Hands-on experience with offensive web security testing tools such as Burp Suite or ZAP.
• Experience building and maintaining automated DevSecOps security pipelines.
• Ability to translate complex security risks into actionable engineering tasks.
• Must be eligible to work in the United States.

Nice to have

• Application security certifications such as OSWE, GWAPT, or CISSP.
• Experience securing cloud-native applications running in Kubernetes or Docker environments.
• Experience managing bug bounty programs or coordinated vulnerability disclosures.

Culture & Benefits

• Remote-first work environment with collaborative communication through Slack.
• Meaningful equity through stock options.
• Medical, dental, and vision plans.
• Flexible PTO.
• $1,200 home office and equipment stipend.
• Inclusive workplace focused on ownership, learning, and respect; employment visas are not sponsored.