Security Analyst (AI)

TL;DR

Security Analyst (AI): Securing modern web applications, APIs, and AI/LLM-powered features within a supply chain software ecosystem with an accent on threat and vulnerability management. Focus on conducting DAST/SAST, automating security workflows, and maturing secure development practices across the organization.

Location: Must be based in Mexico

Company

hirify.global is a leader in supply chain software solutions, dedicated to streamlining operations and improving efficiency through innovative technology.

What you will do

• Scan and analyze vulnerabilities in applications and infrastructure using industry-leading tools.
• Conduct DAST, SAST, and software composition analysis to identify and remediate security risks.
• Collaborate with development teams to provide actionable remediation guidance and track fixes.
• Lead security testing for AI and LLM-powered features, assessing risks against OWASP Top 10 for LLMs.
• Identify opportunities to automate repetitive security tasks and enhance testing efficiency.
• Act as a trusted advisor for secure development practices, threat modeling, and design reviews.

Requirements

• 5+ years of experience in Application Security, Product Security, or Vulnerability Management.
• Strong hands-on experience with DAST, SAST, and Web Application/API security testing.
• Deep understanding of OWASP Top 10 and Secure SDLC principles.
• Experience with cloud platforms (AWS, Azure, OCI) and CSPM tools.
• Must be based in Mexico.
• Excellent documentation and communication skills in English.

Nice to have

• Experience securing LLM-powered applications in production.
• Familiarity with tools like Burp Suite, ZAP, Snyk, Semgrep, or Checkmarx.
• Strong scripting or automation skills (Python, Bash).
• Exposure to SOC 2 or ISO 27001 security controls.

Culture & Benefits

• Commitment to innovation, growth, and professional development.
• Inclusive and equal-opportunity work environment.
• Supportive culture that values unique perspectives and individual journeys.
• Focus on building meaningful technology to improve global supply chains.