Application Security Engineer

Location: London; on-site in the London office five days per week

Company

hirify.global is a startup building tools for the next generation of software users.

What you will do

• Design and implement application security features that protect user data and strengthen the product's security posture.
• Use AI-assisted tooling for security assessments, code reviews, threat modeling, and penetration testing.
• Partner with development teams to integrate secure coding practices throughout the software development lifecycle.
• Track, analyze, prioritize, and manage application vulnerabilities using AI-assisted triage.
• Investigate application-related security incidents and support incident response.
• Monitor emerging security threats, vulnerabilities, and technologies.

Requirements

• Extensive experience building production software, including hands-on work with authentication, data handling, API design, encryption, or similar security-sensitive areas.
• Knowledge of secure coding practices and experience with at least one of threat modeling, risk assessments, or incident response.
• Proficiency in TypeScript, Python, or a similar programming language.
• Experience with cloud infrastructure and cloud security, particularly AWS.
• Strong communication skills for explaining complex security issues to technical and non-technical audiences.
• Ability and willingness to work in person from the London office most of the time.

Nice to have

• Previous startup experience or strong interest in zero-to-one product development.
• Experience across multiple application security disciplines.

Culture & Benefits

• In-person collaboration in a new office near Old Street, with the team working together five days per week.
• Salary positioned slightly above market and equity positioned above market.
• Relocation assistance is available for candidates moving to London.
• A fast-paced startup environment with direct impact on product security.
• Collaborative culture centered on kindness, ambition, pragmatism, and protecting users.