Senior Security Engineer (AI)

Location: Remote - United States

Salary: $178K–$215K annually, plus equity.

Company

hirify.global provides on-demand last-mile logistics and software for construction, industrial, and Fortune 500 customers, operating a nationwide fleet and AI-forward engineering platform.

What you will do

• Own application and cloud security across TypeScript/Node GraphQL APIs, React and React Native applications, Go services, and AWS/EKS infrastructure managed with Pulumi.
• Build authentication services, access proxies, secrets handling, policy-as-code, CI checks, and other security tooling and guardrails.
• Secure autonomous AI agents and LLM-integrated workflows, including access boundaries, credentials, prompt-injection defenses, audit trails, and staff AI-use policies.
• Develop security scanning, detection, and response programs; tune SAST, secrets, container, and IaC scanning, lead incidents, and drive postmortem actions.
• Manage penetration testing and vulnerability remediation, including prioritization, validation, and closure.
• Support SOC 2, enterprise security reviews, customer trust initiatives, developer mentoring, and security roadmap planning.

Requirements

• 8+ years of professional software engineering and/or security experience, including at least 3 years focused on application, product, or cloud security.
• Experience designing and building secure web applications, APIs, and internal tools, with the ability to read, write, and review production code.
• Deep hands-on knowledge of authorization flaws such as IDOR/BOLA, authentication and SSO using SAML, OIDC, and JWT, SSRF, injection, and scalable remediation.
• Strong AWS and Kubernetes security experience covering IAM, network segmentation, workload isolation, secrets management, and infrastructure as code.
• Experience leading security incidents with diligent response and clear communication.
• Ability to operate as a team of one, prioritize by real risk, make pragmatic tradeoffs, and work without an established playbook.
• Fluency with AI-paired delivery tools such as Claude Code, Cursor, or equivalent, plus a clear understanding of AI-agent and LLM-application risks.
• Strong communication with technical and non-technical stakeholders and empathy for developers and customers.

Nice to have

• Experience as an early or first security hire at a startup.
• Detection engineering experience with SIEM or detection-as-code pipelines.
• Experience securing LLM applications or agentic systems, including OWASP LLM/Agentic Top 10, MCP, or NIST AI RMF.
• Experience with SOC 2, ISO 27001, or enterprise customer security reviews.
• Offensive security experience through penetration testing, bug bounty programs, or CTFs.
• Experience with TypeScript, Node, GraphQL, Postgres, Go, EKS, Pulumi, or NATS.
• Security community contributions through research, talks, open source, or writing.

Culture & Benefits

• Opportunity to build hirify.global’s security function from the ground up with direct leadership access and authority over risk management.
• Work on multi-tenant logistics data, enterprise SSO, a large GraphQL surface, and an AI agent platform that ships code to production.
• AI-forward engineering environment using Claude, Claude Code, Cursor, and Bedrock.
• Equity compensation and comprehensive health, dental, vision, and 401(k) benefits.