Security Engineer (AI)

Location: Remote across Albania, Austria, Belgium, Bosnia, Bulgaria, Croatia, Czech Republic, Denmark, Estonia, Finland, Germany, Greece, Hungary, Ireland, Kosovo, Latvia, Lithuania, Moldova, Montenegro, Netherlands, Norway, Poland, Portugal, Serbia, Slovakia, Slovenia, Spain, and the United Kingdom. Berlin office listed; regular off-sites may take place.

Company

hirify.global is an open workflow orchestration platform for technical teams, combining code flexibility with no-code speed and more than 500 integrations.

What you will do

• Conduct threat modelling and risk assessments across product features, AI agents, cloud infrastructure, corporate IT, internal applications, and data systems.
• Partner with Engineering, Cloud, IT, Data, Legal, Finance, Sales, Solutions Engineering, and Customer Success to define and implement practical security controls.
• Improve secure development practices through design reviews, secure coding guidance, documentation, and security tooling.
• Establish logging, detection, protective monitoring, incident response runbooks, and security exercises.
• Coordinate vulnerability triage, remediation, secure patching, bug bounty operations, vulnerability disclosures, and GitHub Security Advisories.
• Support SOC 2 through continuous control monitoring, automated evidence collection, and customer security assessments.

Requirements

• Hands-on experience with threat modelling, risk assessment, vulnerability validation, proof-of-concept development, and security automation.
• Security engineering experience in application, infrastructure, product, platform, corporate, or cloud security within a product-focused organisation.
• Deep expertise in at least two areas including application security, platform security, corporate security, security monitoring, security assurance, vulnerability disclosure, AI and agent security, penetration testing, or corporate IT tooling.
• Ability to influence cross-functional stakeholders, communicate complex risks clearly, and drive remediation without direct authority.
• Fluency with LLM-assisted tooling, including its limitations, security implications, and failure modes.
• English is the company language; candidates outside Germany must already have the right to work in their country.

Nice to have

• Experience with open-source or source-available products, hirify.global, Okta, Azure, Drata, bug bounty programmes, GHSAs, or CVEs.
• Experience as an early security hire or establishing security practices in a startup or rapidly scaling organisation.

Culture & Benefits

• Remote-first work across Europe with regular off-sites and hackathons.
• Europe-based employees receive 30 days of vacation plus local public holidays and benefits according to local country norms.
• €1,000 per year for courses, books, events, or coaching.
• Equity, a $100 monthly open-source contribution budget, and transparent company operations.
• Visa sponsorship is available for Germany.