Security Engineer (SaaS)

TL;DR

Security Engineer (SaaS): Building and improving the security foundations of a high-scale developer platform with an accent on API security, tenant isolation, and internal access controls. Focus on designing secure defaults, implementing robust detection pipelines, and ensuring security is seamlessly integrated into deployment processes.

Location: Must be based in Americas or European timezones

Salary: $120,000 - $140,000 USD

Company

hirify.global is a modern email-sending platform for developers, backed by a16z and Y Combinator, focused on quality and developer experience.

What you will do

• Build and improve security foundations including API keys, service permissions, and secrets management.
• Design secure defaults for services, databases, and deployment pipelines.
• Improve detection and response for suspicious access, leaked credentials, and abnormal system events.
• Review and update processes to ensure security is built-in rather than added as an afterthought.
• Drive day-to-day security initiatives as the first dedicated security hire.

Requirements

• Must be based in Americas or European timezones.
• Experience securing production infrastructure, cloud environments, or multi-tenant SaaS products.
• Proficiency in reading and writing application, infrastructure, and deployment code.
• Deep understanding of authentication, authorization, IAM, logging, and incident response.
• Ability to independently prioritize and drive security initiatives.
• Strong belief in developer experience and practical, low-friction security improvements.

Nice to have

• Experience with email infrastructure, sender reputation, and abuse prevention.
• Knowledge of cloud security tools like AWS, Terraform, Kubernetes, or Cloudflare.
• Background in supply-chain security or open-source security.
• Experience with compliance frameworks like SOC 2, ISO 27001, or GDPR.
• Experience working with Trust & Safety or platform integrity teams.

Culture & Benefits

• 100% remote team with flexible working schedules.
• High autonomy and ownership of problems and solutions.
• Modern tech stack including Next.js and Raycast.
• Honest, low-ego team culture.
• Opportunities for travel to team offsites, conferences, and meetups.