Security & Platform Engineer (AI Security)

TL;DR

Security & Platform Engineer (AI Security): Build and harden internal agentic platform infrastructure with an accent on security frameworks, least-privilege permissioning, and compliance. Focus on adversarial testing for AI threats (prompt injection, privilege escalation, data exfiltration) and on translating emerging AI threat vectors into practical mitigations.

Location: Berlin

Company

hirify.global builds tax-filing products through Taxfix and Steuerbot, enabling customers to file taxes with confidence.

What you will do

• Develop tools and capabilities for compliant, secure agentic automations aligned with EU AI Act and GDPR.
• Co-design and govern a permissioning framework defining what agents can access and ensuring least-privilege.
• Own MDM, endpoint security, and identity & access management; lead incident response for agent- or infrastructure-related security events.
• Build, harden, and evolve the agentic platform layer (secure sandboxes, credential vaults, CI/CD pipelines with security checks) and define internal platform standards.
• Run adversarial testing against agent deployments (prompt injection, privilege escalation, data exfiltration) and maintain an AI attack-pattern test library.
• Brief leadership on emerging AI threat vectors and implement actionable mitigations.

Requirements

• Hands-on security engineering background with experience in penetration testing, threat modeling, or red teaming.
• Knowledge of AI/ML attack surfaces including prompt injection, data poisoning, model inversion, and indirect injection via documents or APIs.
• Practical experience designing and enforcing least-privilege architectures and identity & access management.
• Working understanding of GDPR/DSGVO, including building or auditing data classification and retention frameworks.
• Comfort with platform-layer security: CI/CD, secrets management, sandbox environments, and automation for security tooling and test suites.
• Strong communication and documentation skills for attack vectors, access decisions, and security frameworks.

Culture & Benefits

• Hybrid work setup based in Berlin.
• Free mental health coaching sessions and yoga.
• Monthly allowance for services with flexible rollover.
• Employee stock options for all employees.
• 30 annual vacation days and flexible working hours.
• Learning budget plus guidance from internal L&D experts.
• Work from abroad for up to six weeks per year (aligned with the team).
• Free tax declaration filing via the Taxfix app and internal support for personal tax questions.