Staff Security Engineer (AI)

TL;DR

Staff Security Engineer (AI): Leading and scaling security efforts for an AI-native document generation platform, safeguarding customer data, products, and the company's reputation. Focus on risk management, code and network security, and incident response.

Location: Hybrid role in Toronto, with an expectation of being in the office three days per week.

Salary: CA$181,011 – CA$274,246

Company

hirify.global is on a mission to close the justice gap using technology and AI, empowering personal injury lawyers and victims to get the justice they deserve.

What you will do

• Identify and address security risks through comprehensive assessments and mitigation strategies.
• Ensure secure coding and implement systems to protect against unauthorized access and data breaches.
• Develop and execute incident response plans, conduct forensic analysis, and take preventive measures.
• Maintain compliance with regulations and industry standards, promote transparency, and address ethical concerns.
• Mentor and guide team members to build security expertise across the engineering organization.

Requirements

• 8+ years in a security-focused engineering role with hands-on technical architecture, implementation, and oversight experience.
• Expertise in SAST/DAST, application security, and CI/CD pipeline integration.
• Deep knowledge of AI-specific threats (prompt injection, model poisoning, membership inference, adversarial perturbation, output manipulation).
• Experience implementing security principles, operating system and web application security, and familiarity with the OWASP Top 10 and common threat tactics.
• Strong programming or scripting skills in at least one language (e.g., Python, Ruby, Node.js).
• Relevant cybersecurity certification (CISSP, CISM, CISA, CRISC, GIAC, etc.).

Nice to have

• Infrastructure-as-code or configuration management language fluency.
• Security controls design and implementation experience.
• GCP security architecture exposure.
• Security compliance implementation (SOC2, HIPAA, CCPA).
• Penetration testing (web and infrastructure).

Culture & Benefits

• Choice of medical, dental, and vision insurance plans.
• Flexible paid time off, sick leave, short-term and long-term disability.
• A home office stipend.
• 401(k) for US-based employees and RRSP for Canada-based employees.
• Paid parental leave.