Staff Security Engineer (AI)

Location: Remote within the US via hub cities, with hybrid office attendance requirements. New York City employees work onsite three days per week; employees in Boston, Washington, DC, Chicago, Seattle, and San Francisco attend monthly Work Together Days.

Base salary: $221,000–$260,000 per year, plus equity and benefits.

Company

hirify.global provides virtual healthcare and women's and family health programs through employer, health plan, and consumer platforms.

What you will do

• Design and implement scalable infrastructure supporting HIPAA, SOC 2, and ISO 27001 compliance.
• Build identity, authentication, authorization, observability, anomaly detection, and least-privilege access systems.
• Develop self-service security tooling, automated access workflows, policy enforcement, security testing, and compliance evidence collection.
• Integrate software supply-chain security, SBOMs, dependency scanning, and AI-assisted security analysis.
• Lead threat modeling, security architecture reviews, secure-by-default design, and protection of PHI workflows.
• Provide technical leadership, mentor engineers, and partner with Engineering, Compliance, Clinical, and Legal teams.

Requirements

• 8+ years of software engineering experience, including 3+ years in security infrastructure or application security.
• Experience designing large-scale, distributed, cloud-native systems and strong coding skills in Python, TypeScript, Go, and/or Rust.
• Deep understanding of cloud security; GCP is preferred, with AWS and Azure experience also accepted.
• Experience with Kubernetes, containers, Terraform, security testing frameworks, and secure SDLC practices.
• Strong communication, documentation, and cross-functional collaboration skills.
• Ability to work from the US and meet the stated hub-city collaboration requirements.

Nice to have

• Expertise in Zero Trust, authentication and authorization frameworks, data-loss prevention, and threat detection.
• Experience with SOC 2, ISO 27001, PCI-DSS, NIST, security telemetry, and CI/CD pipeline hardening.
• Familiarity with AI/ML security, AI-assisted analysis tools, and software supply-chain security.
• CISSP, GCP Professional Cloud Security Engineer, or OSCP certification.

Culture & Benefits

• Flexible hybrid work model with remote work through US hub cities and regular in-person collaboration.
• Employer-covered health, dental, and insurance plan options.
• Access to Maven healthcare specialists, wellness partnerships, and whole-self care programs.
• 16 weeks of 100% paid parental leave and a new parent stipend for eligible employees.
• Annual professional development stipend, personal career coaching, and 401(k) matching for US-based employees.