Security Engineer (AI)

Location: SF Bay Area, on-site

Salary: $150,000–$350,000 per year; base salary depends on permanent work location, experience, skills, and team position.

Company

hirify.global is an AI evaluation platform founded by researchers from UC Berkeley's SkyLab, used by consumers, AI labs, enterprises, and researchers to evaluate frontier models in real-world workflows.

What you will do

• Design and ship authentication, authorization, multi-tenant isolation, and account, session, device, and credential lifecycle systems.
• Develop security controls for AI, agentic, and tool-use surfaces, including sandboxed code execution, model-provider isolation, and evaluation data handling.
• Build privacy-preserving data systems covering pseudonymous identifiers, controlled re-identification, retention, deletion, minimization, and verification of data removal.
• Implement durable, queryable security event records for authentication, account changes, and privileged actions.
• Ship security-sensitive changes across request paths, partner integrations, data models, telemetry pipelines, migrations, backfills, rollout controls, and third-party trust services.
• Own application security across APIs and browser surfaces, including CSP, security headers, cookie and origin policy, third-party JavaScript controls, threat modeling, libraries, middleware, and tests.

Requirements

• 6+ years of software or security engineering experience, including building and shipping production systems at scale.
• Recent hands-on production engineering experience and the ability to explain architecture, evolution, and personally authored code in depth.
• Strong application and API security expertise, including authorization models, session and token handling, and multi-tenant isolation.
• Strong proficiency in a modern backend language, solid Postgres data fundamentals, and experience running safe production migrations.
• Working fluency with HMACs, secure random generation, key and secret rotation, and preventing sensitive data leakage through logs, traces, and stored payloads.
• Experience with threat modeling, secure architecture, AI or LLM-backed systems, translating legal and policy requirements into product behavior, and communicating across engineering, product, legal, and leadership.

Nice to have

• Experience securing AI, agentic, or LLM-backed systems in production.
• Offensive security instincts and experience building systems that identify security flaws systematically.
• Experience with TypeScript, Go, Python, Postgres, Hono, Next.js, React, Terraform, Spacelift, or Vitest.

Culture & Benefits

• Small, mission-driven team working on cutting-edge AI.
• Culture focused on transparency, trust, craftsmanship, curiosity, and community impact.
• Competitive compensation and equity aligned with the market where the employee is based.
• Comprehensive medical, dental, vision, and additional health and wellness benefits.