Security Engineer (AI)

Location: Hybrid in New York City or remote within US time zones

Company

hirify.global provides enterprise infrastructure for MCPs, Skills, and Agents, with security, governance, and observability for AI adoption.

What you will do

• Build and improve hirify.global Watch products for static and dynamic scanning of MCP servers, skills, plugins, and agent behavior.
• Develop shadow detection to identify unregistered MCP servers, skills, plugins, and agents operating outside enterprise governance.
• Own application security for the platform, including penetration testing, vulnerability management, dependency scanning, and control-plane hardening.
• Build automated, CI/CD-integrated version scanning for MCP servers, skills, and plugins.
• Extend detection coverage to CLI agents such as Codex and OpenCode and to browser-based agents.

Requirements

• 8+ years of experience in security engineering, application security, security tooling development, or endpoint detection.
• Experience building scanning or detection systems, including parsers, rule engines, or analysis pipelines.
• Experience with shadow IT detection, asset discovery, or endpoint monitoring in enterprise environments.
• Strong Python skills; the scanning pipeline and platform backend use Python and FastAPI.
• Understanding of API and gateway attack patterns, including SSRF, token theft, injection, and supply-chain attacks.
• Awareness of AI and LLM security threats, including prompt injection, tool poisoning, jailbreaking, and indirect prompt injection through tool responses.

Nice to have

• Experience with MCP, AI agents, or LLM security.
• Experience building commercial security products.
• Network in enterprise security, including the SVCI or Israeli security community.

Culture & Benefits

• Opportunity to work with founders from Zapier's AI team and senior engineers with cyber security backgrounds.
• Ownership of detection products from threat modeling through shipped features.
• Paid vacation, sick leave, and parental leave.
• Budget for conferences, courses, and certifications.
• Choice of laptop and accessories, plus health, dental, and vision coverage.
• Direct interaction with enterprise customers and innovative companies.