Lead Security Engineer (AI Security)

Location: Hybrid, with three days per week on-site at the office in Berlin, Germany. Work from abroad is available for up to 10 days per year. Relocation support includes visa-process assistance and a relocation package.

Company

hirify.global operates Immohirify.global, a real-estate digital ecosystem serving homeowners, property seekers, and agents in Germany and Austria.

What you will do

• Set the technical direction and engineering outcomes for product, cloud infrastructure, and AI security.
• Design and implement reusable controls, guardrails, and security-as-code patterns across cloud, identity, containers, infrastructure as code, and CI/CD.
• Lead threat modelling and security architecture reviews for high-impact products, platforms, and AI-enabled capabilities.
• Build paved roads and self-service security capabilities that enable secure-by-default development.
• Use evidence and meaningful metrics to prioritise investments, demonstrate control effectiveness, and communicate risk and trade-offs.
• Act as a technical authority and escalation point while mentoring engineers and raising security capability across the organisation.

Requirements

• Hands-on security engineering and technical leadership experience in a medium-to-large engineering organisation.
• Deep expertise in application or cloud security, with breadth across infrastructure, identity, and data security.
• Experience building security controls for cloud-native environments, ideally AWS, including containerised workloads, infrastructure as code, and CI/CD systems.
• Strong software engineering and automation skills, including production-quality code or tooling with Python, Terraform, or comparable technologies.
• Practical experience with threat modelling, secure architecture, and embedding security throughout the software development lifecycle.
• Strong judgement, communication, adaptability, and the ability to influence without formal authority.

Nice to have

• Experience securing AI-enabled products, LLM applications, agents, machine-learning platforms, or supporting data pipelines.
• Experience with Kubernetes and modern application, cloud, or software-supply-chain security tooling.
• Experience protecting sensitive data and implementing controls for GDPR, ISO 27001, or comparable requirements.

Culture & Benefits

• Inclusive, diverse, and learning-oriented environment with structured feedback and individual career paths.
• 30 days of vacation per year and a hybrid working model.
• Dedicated learning time, online courses, book challenges, and Lunch & Learn events.
• Family services, public transport or Job Bike subsidies, company pension support, and health coaching.
• Barrier-free office near Berlin central station with a gym, courses, rooftop terrace, cafeteria, and other on-site facilities.
• Dog-friendly office subject to approval and a commitment to sustainability and diversity, equity, and inclusion.