Security Engineer

TL;DR

Security Engineer: Spanning application security, security operations, and IT security, focusing on implementing and maintaining security tools in CI/CD pipelines, vulnerability management, and incident response. Focus on supporting identity and access management initiatives and contributing to protecting critical infrastructure and applications.

Location: Hybrid (expected to work from office 3 days a week) in Denver, CO or San Francisco, CA. A relocation stipend may be available for those willing to relocate to a hirify.global hub location (Denver, CO, San Francisco, CA, Nashville, TN, and Santiago, Chile).

Salary: $150,000–$176,000 USD (San Francisco, CA) or $127,000–$149,000 USD (Denver, CO)

Company

hirify.global is building a data platform to power safe and fair decisions, using innovative technology to help customers assess risk and ensure safety and compliance to build trusted workplaces and communities.

What you will do

• Help implement and maintain security tools in CI/CD pipelines.
• Participate in security design and code reviews.
• Support vulnerability management and remediation efforts.
• Support bug bounty program triage and coordination.
• Monitor and triage security alerts from various security tools.
• Configure SSO for applications and support identity and access management initiatives.

Requirements

• 2-3+ years of security experience with exposure to application security.
• Programming knowledge in at least one language (Ruby, JavaScript, Go, Python preferred).
• Understanding of web application security fundamentals and common vulnerabilities.
• Familiarity with security tools such as vulnerability scanners, SAST/DAST tools.
• Strong communication skills and ability to work collaboratively with engineering teams.
• Problem-solving mindset with attention to detail and a willingness to learn across multiple security domains.

Nice to have

• Experience with SSO solutions (Okta, Auth0, etc.).
• Knowledge of compliance frameworks (SOC 2, ISO 27001).
• Security certifications (Security+, CISSP, etc.).
• Experience with DevSecOps practices, terraform.

Culture & Benefits

• A fast-paced and collaborative environment.
• Learning and development allowance.
• Competitive compensation and opportunity for advancement.
• 100% medical, dental, and vision coverage.
• Up to $25K reimbursement for fertility, adoption, and parental planning services.
• Flexible PTO policy and monthly wellness stipend.
• In-office perks include lunch five times a week, a commuter stipend, and an abundance of snacks and beverages.