Lead Security Engineer

Location: Remote; Brazil, Mexico, or Colombia

Salary: $80,000–$100,000 USD annually

Company

hirify.global operates an on-demand marketplace for lawn care and outdoor services and is expanding into a broader home-services platform across three brands.

What you will do

• Lead security across the PHP/Laravel and TypeScript/React applications, AWS infrastructure, payment systems, and customer and professional data.
• Build application-security practices including threat modeling, secure SDLC, code review, SAST, secret scanning, dependency scanning, and vulnerability management.
• Strengthen AWS and Kubernetes security through IAM, network controls, encryption, secrets management, and production guardrails.
• Drive PCI scope mapping, SOC 2 and LGPD readiness, vendor risk management, and security questionnaire responses.
• Improve detection and incident response using Datadog, Sentry, and AWS signals, including an incident runbook and MTTD/MTTR baselines.
• Establish security standards, playbooks, and hiring plans for a small team expected to grow within approximately 12–18 months.

Requirements

• Hands-on expertise across at least three of application security, cloud security, compliance, and incident response.
• Experience building technical security controls, pipelines, automated scans, detections, and cloud guardrails.
• Ability to prioritize risks pragmatically across payments, personally identifiable information, marketplace operations, and shared infrastructure.
• Experience or strong interest in securing AI-agent-authored code through automated gates, secure-coding conventions, and review processes.
• Strong collaboration skills with engineering delivery teams and Cloud & DevOps.

Culture & Benefits

• Fully remote work with a US-distributed engineering organization.
• Asynchronous work and autonomy over the working environment.
• Claude Code and the engineering agent stack provided for security work.
• Opportunity to define the security function and build its first dedicated team.