Program Analysis Engineer (ML)

Location: Palo Alto, California, United States; hybrid work with 3 days per week onsite

Salary: $160,000–$220,000 per year, with potential additional incentives, restricted stock units, and bonuses.

Company

hirify.global builds an application security platform that uses software analysis and call graphs to identify, prioritize, and remediate critical risks across complex software estates.

What you will do

• Improve static analysis tools across precision, recall, coverage, and performance.
• Evolve SCA and SAST platforms for vulnerability detection, dependency analysis, and software supply chain risk prioritization.
• Run machine-learning experiments for SCA and SAST, including problem framing, dataset preparation, evaluation, and productionization.
• Develop program-analysis infrastructure involving call graphs, data-flow and taint analysis, and language-specific analyzers.
• Collaborate with engineering, product, and research peers on technical roadmaps, design discussions, code reviews, and pairing.
• Address performance bottlenecks, reliability issues, technical debt, customer findings, and analysis behavior.

Requirements

• Experience with program analysis, static analysis, or ML for code, including areas such as call graphs, data-flow analysis, taint analysis, abstract interpretation, symbolic execution, vulnerability detection, or code representation learning.
• Software engineering experience from industry, research, open source, or a combination of these.
• Ability to work comfortably with at least one of Java, Python, or Go and ship production-quality code.
• Product mindset and ability to balance technical trade-offs with user needs.
• Strong communication and collaboration skills.
• Ability to work onsite in Palo Alto three days per week.

Nice to have

• AppSec, DevSecOps, or software supply chain security experience.
• Experience with production ML systems, including training pipelines, evaluation frameworks, model serving, or feedback loops.
• Contributions to open-source static analysis tools, program-analysis frameworks, or security research.
• Early-stage startup or founding engineer experience.
• Experience building developer-facing products or platforms.

Culture & Benefits

• Work at the intersection of developer productivity and application security.
• Ownership-focused environment that emphasizes fast learning, customer success, and data-informed decisions.
• Inclusive workplace committed to equal opportunity and diverse perspectives.
• Potential additional incentives, restricted stock units, and bonuses depending on the role.