Security Engineer, Application Security (AI)

TL;DR

Security Engineer, Application Security (AI): Building security foundations that protect AI systems and integrating security into engineering workflows with an accent on application security, AI infrastructure, developer enablement, and threat modeling LLM architectures. Focus on designing automated security controls, securing AI agents, protecting training data pipelines, and proactively building defenses against novel AI/ML security risks.

Location: Remote within the US or hybrid from San Francisco or New York City offices.

Company

hirify.global is where the world's leading enterprises orchestrate AI-powered work, providing an end-to-end platform for building and deploying AI agents grounded in company data.

What you will do

• Embed security into the AI platform's DNA by conducting threat modeling and designing secure architectures for new features.
• Own and evolve the application security program, including SAST/DAST scanning in CI/CD pipelines and security code reviews.
• Partner with engineering teams to establish and champion secure coding standards, creating reusable security patterns.
• Design and recommend security features and products to secure customer environments.
• Integrate and leverage AI agents to increase velocity for the security team and engineering organization.
• Lead security assessments and penetration testing of applications, AI services, and APIs.
• Design and implement security controls for protecting data pipelines, model training environments, and customer-facing AI agents.
• Stay ahead of emerging threats in the AI/ML security landscape and build defenses against novel risks.

Requirements

• 2+ years of hands-on experience in application security engineering with a proven track record of securing large-scale production systems.
• Understanding of developer experience and developer workflows for shipping features and products.
• Technical expertise in at least two programming languages (Python, Java, Go, JavaScript/TypeScript) and ability to review code.
• Knowledge of security tools and methodologies including SAST/DAST solutions, vulnerability management, and DevSecOps practices.
• Excellent communication skills to translate complex security concepts into clear recommendations.
• A builder's mindset that looks for opportunities to automate, scale, and empower.