Principal Security Engineer (AI)

Location: United States; remote, with 0 days per week in-office.

Salary: USD $165,600–$296,400 gross annual base pay across the U.S.; USD $220,800–$331,200 in the San Francisco Bay Area and New York City metropolitan area.

Company

hirify.global operates within Microsoft divisions and develops products and platforms supported by security engineering and assurance capabilities.

What you will do

• Lead technical security reviews of products, services, infrastructure, and emerging technologies using architecture analysis, threat modeling, adversarial testing, source review, telemetry, and data analysis.
• Turn review outcomes into prioritized security roadmaps with practical milestones, trade-offs, and measurable risk-reduction goals.
• Build and maintain security tools, automation, prototypes, and reusable engineering patterns adopted by product and research teams.
• Partner with engineering teams to design, implement, debug, and validate security improvements through root-cause resolution.
• Integrate automated security checks, guardrails, and secure defaults into engineering systems.
• Use threat intelligence, hunting, telemetry, and incident learning to improve detections, controls, and engineering priorities.

Requirements

• Doctorate with 5+ years, master's degree with 6+ years, bachelor's degree with 8+ years, or equivalent experience in computer science, mathematics, statistics, or a related field.
• Experience in software development lifecycle, large-scale computing, threat modeling, cybersecurity, anomaly detection, SOC detection, threat analytics, SIEM, IT, or incident response.
• Experience owning complex, multidisciplinary, multi-organization security problems through technical resolution and validated improvement.
• Experience building security tools, automation, or internal security capabilities used by engineering teams.
• Hands-on experience with multiple security assessment methods, such as architecture review, source or configuration review, adversarial testing, attack-path analysis, detection engineering, or incident investigation.
• Ability to analyze security or operational data and lead complex cross-team technical initiatives.

Nice to have

• Software engineering experience with Python, C#, C++, Go, Java, Rust, or TypeScript.
• Experience securing complex cloud, distributed, identity, data, AI, or developer-platform systems.
• Experience designing secure defaults, reusable engineering patterns, or automated controls.
• Experience with threat intelligence, adversary simulation, hunting, or incident-based improvements to preventive and detective controls.
• Industry-level mentoring experience for engineers or security practitioners.

Culture & Benefits

• Remote work with no expected in-office days per week.
• Work on ambiguous, non-standardized security problems involving emerging technologies.
• Benefits and additional compensation may be available.
• Equal opportunity employment and reasonable accommodation support are provided.

Hiring process

• Applications are accepted on an ongoing basis until the position is filled.
• The position will remain open for at least five days.