Security Engineer (AI)

Location: On-site in San Francisco or NYC; five days per week in the office, with the role specifically described as in-person in San Francisco's Financial District.

Salary: $250,000–$300,000 per year

Company

hirify.global is an applied AI startup building an autonomous assistant that learns a persistent model of each user and performs work across email, calendars, documents, Slack, and CRM systems.

What you will do

• Own application and product security across the hirify.global assistant and its autonomous agent action surface.
• Threat-model agent behavior, including prompt injection, tool misuse, untrusted inputs, sensitive data, and external actions.
• Secure the persistent-user-model data pipeline through encryption, tenant isolation, access controls, and secrets management.
• Harden cloud infrastructure and third-party OAuth integrations with Google, Slack, and CRM systems.
• Build the secure development lifecycle, including design reviews, security-focused code reviews, dependency hygiene, and supply-chain tooling.
• Establish and run incident response, including detection, triage, and postmortems.

Requirements

• Extensive security engineering experience with strong depth in application and/or infrastructure security.
• Ability to read and write production code and resolve security issues directly.
• Experience securing a multi-tenant SaaS product that handles sensitive user data at scale.
• Practical knowledge of AWS and/or GCP cloud security, authentication and authorization, secrets management, and encryption.
• Strong threat-modeling skills and the ability to explain security risks clearly to engineers and founders.
• Willingness to work in person at the San Francisco office five days per week.

Culture & Benefits

• Work in person with the full team to build and secure the product.
• Own security from the ground up in a fast-moving startup environment.
• Help establish security practices that support rapid product development without compromising user trust.