Staff Security Engineer (AI)

Location: NYC, United States; onsite

Company

hirify.global provides an AI-era banking and finance platform for startups and growth-stage companies, covering accounts, cards, payments, treasury, expenses, accounts payable, and accounting workflows.

What you will do

• Threat-model new systems and review designs with engineering teams before release.
• Build secure defaults, CI guardrails, dependency and software supply-chain checks, and other paved-road security tooling.
• Own the vulnerability lifecycle, including triage, SLA management, remediation tracking, and the vulnerability disclosure program.
• Harden GCP and GKE using least-privilege IAM, workload identity, secrets management, network policy, environment separation, and Terraform.
• Secure LLM, agent, and MCP surfaces through guardrails, sandboxes, scoped agent identities, and prompt-injection detection.
• Own SIEM detections, incident response, tabletop exercises, threat hunting, runbooks, and post-mortems.

Requirements

• 6+ years in security engineering or software engineering with a security focus.
• Hands-on production coding and tooling experience; the role is not limited to producing findings.
• Depth in at least one of product security, cloud and platform security, or detection and response, plus working knowledge of the other two.
• Experience with Python or Go, Kubernetes, Terraform, and at least one major cloud platform.
• Ability to change production systems, own outcomes, prioritize competing risks, and balance security with engineering velocity.
• Clear technical writing for design reviews, runbooks, and incident reports.

Nice to have

• Fintech, payments, or other regulated-industry experience, including PCI DSS or SOC 2 evidence work.
• Bug bounty, red-team, CVE, technical speaking, or open-source experience.
• Hands-on AI security experience with guardrails, agent identities, or prompt-injection defense.

Culture & Benefits

• Full-time onsite work in NYC.
• Security is treated as part of the product, with close collaboration with engineers who ship the platform.
• The security function currently includes a VCISO, a security engineer in Poland, and engineering partners; this role will be the first US security engineer and help grow the team.
• Expected ownership includes production security, vulnerability queues, incident response, and an on-call rotation until dedicated detection and response hiring is complete.