Principal Security Engineer (AI)

TL;DR

Principal Security Engineer (AI): Identifying and mitigating security risks across hirify.global's applications, cloud environments, and AI-enabled systems with an accent on application security assessments, penetration testing and secure design reviews. Focus on securing cloud-native applications in AWS environments and driving AI security initiatives.

Location: Remote within the United States

Salary: $168,600.00 - $269,400.00 annually (CA, CT, MD, MA, NJ, NY, WA, DC) or $160,200.00 - $256,000.00 annually (CO, HI, IL, MN, NV, OH, RI, VT)

Company

hirify.global is reimagining how people move—through the real estate market and through their careers.

What you will do

• Lead application security assessments, including scoping and managing penetration testing, threat modeling, and secure design reviews.
• Identify, validate, and prioritize complex security vulnerabilities across web applications, APIs, and cloud-native services.
• Partner with software engineers to embed secure-by-default patterns into application architectures and development workflows.
• Influence the security of primarily AWS-based systems, with exposure to GCP and Azure.
• Drive AI security initiatives by establishing guardrails, patterns, and review practices, and assess AI-specific risks.
• Develop and promote scalable application and AI security standards, guardrails, and best practices.

Requirements

• Minimum of 7+ years of security engineering experience, including at least 5+ years focused on Application Security or penetration testing.
• Demonstrated experience driving or owning AI security initiatives (2+ years), including assessing and mitigating risks in AI- or LLM-enabled systems.
• Deep understanding of common vulnerability classes and secure software development practices.
• Hands-on experience securing cloud-native applications, particularly in AWS environments, and designing secure solutions across modern application and cloud environments.
• Ability to read, write, and review code in at least one modern programming language.
• Proven experience designing and implementing secure system architectures, including hands-on threat modeling and security-driven design decisions.

Culture & Benefits

• Flexibility isn’t a perk–it’s how we work.
• Cloud HQ is our distributed-first model, built on trust, clear systems.
• The belief that you can do great work from wherever you are.