Security Engineer (Cybersecurity)

Location: New York City, United States; work is on-site.

Salary: $180,000–$230,000 per year, plus equity.

Company

hirify.global is a cybersecurity company building security technology for customers handling sensitive telemetry.

What you will do

• Own internal security posture across endpoint, identity and access, network, email, and corporate cloud security.
• Design and operate SSO, MFA, conditional access, and privileged access management.
• Build vulnerability management, patching, endpoint hardening, and continuous monitoring programs.
• Lead internal incident response from detection and containment through investigation and post-incident review.
• Drive SOC 2 Type II, ISO 27001, and future compliance and certification work, including audits and evidence collection.
• Own IT architecture, security tooling, vendor risk, security awareness, and office network and physical access controls.

Requirements

• 5+ years of hands-on experience in security engineering, IT security, or corporate security at a software or technology company.
• Deep expertise in identity and access management, endpoint security, cloud security, or SaaS security.
• Hands-on experience with SOC 2 and/or ISO 27001 audits and direct internal incident response leadership.
• Understanding of attacker tradecraft and familiarity with EDR, SIEM, IAM, MDM, DLP, email security, and vulnerability management tools.
• Strong systems thinking, communication skills, and the ability to explain security tradeoffs to leadership and non-technical teams.
• Comfort working autonomously in an early-stage environment and building programs from scratch without a team.

Nice to have

• Experience as a first or founding internal security hire at a startup.
• Background in SOC operations, threat detection, red teaming, or product security.
• CISSP, OSCP, GCIA, GCIH, CISA, or equivalent certification.
• Experience with SIEM, XDR, or detection and response platforms sold by hirify.global.
• Familiarity with FedRAMP, HIPAA, PCI, or GDPR.

Culture & Benefits

• High autonomy and ownership of the internal security program.
• Close partnership with founders, leadership, engineering, security, and external IT providers.
• Top-of-market equity component.
• Inclusive environment welcoming people of all backgrounds and perspectives.