Founding Security Engineer (Cybersecurity)

Location: Remote within the United States; applications are accepted from AR, AZ, CO, FL, GA, ID, IN, IL, IA, KS, MA, MD, MN, MO, MT, NC, NM, NV, NY, OH, OK, OR, RI, SC, TN, TX, UT, VA, WA, WI, and WV.

Salary: $195K–$220K annually, plus bonus.

Company

hirify.global provides customized education and learning resources to students and families across the United States, serving more than 100,000 students.

What you will do

• Own identity and access programs, including SSO/SAML, MFA, provisioning, least-privilege access, and onboarding/offboarding.
• Lead corporate and IT security across endpoint management, MDM, SaaS and vendor risk, phishing awareness, and incident response.
• Drive SOC 2 Type II readiness, audits, and remediation while mapping FERPA, COPPA, and state privacy requirements to controls.
• Implement application security initiatives including SAST, DAST, and SCA in CI.
• Partner with engineers on vulnerability triage and remediation, and manage external penetration testing.
• Set the security strategy, tooling, sequencing, and operating programs as the first security team member.

Requirements

• 6+ years of security experience, ideally in finance, education, healthcare, or another regulated sector.
• Hands-on experience across IT, identity, security operations, compliance, and application security.
• Experience taking an organization through SOC 2 or ISO 27001.
• Experience designing or operating a zero-trust environment with identity-based access and continuous verification.
• Strong risk judgment, technical depth, and communication skills for working with engineers and educators.
• Must be located in one of the listed US states; hirify.global participates in E-Verify.

Nice to have

• Edtech, FERPA, or privacy experience.
• CISSP or OSCP certification.

Culture & Benefits

• High autonomy to choose tooling, set strategy, and sequence security initiatives.
• Direct partnership with engineering, IT, and legal, with the role reporting to the CTO.
• Focus on automation, human-centered security processes, and measurable outcomes.
• Opportunity to protect the education and personal data of more than 100,000 students.