Security Engineer with MCP Security, AI Governance Platform (AI)

Location: Armenia, Bulgaria, Cyprus, Georgia, Kazakhstan, Latvia, Poland, Romania, Serbia, or Ukraine

Company

hirify.global delivers technology services and works on global software and AI projects.

What you will do

• Design and implement security controls for MCP servers and agent-to-tool communications.
• Define authentication and authorization mechanisms using OAuth 2.0, OIDC, JWT, and related identity standards.
• Conduct security reviews, validate trust boundaries, and develop threat models for agentic AI systems.
• Assess risks involving excessive agent permissions, tool access, prompt-related threats, sensitive data exposure, and payload classification.
• Support network isolation using VPC, PrivateLink, and cloud-native security services.
• Contribute to AI governance, security policies, compliance requirements, and architecture improvements.

Requirements

• 4+ years of experience in application security or cloud security engineering.
• Hands-on experience securing MCP server environments, including authentication, authorization, or security assessments.
• Experience with OAuth 2.0, JWT, OpenID Connect, SigV4, and TLS 1.3.
• Experience with threat modeling for AI systems and large language model applications.
• Knowledge of OWASP Top 10 for LLMs, excessive agency, tool parameter exposure, and data leakage risks.
• Knowledge of cloud networking concepts including VPC and PrivateLink, plus strong cross-functional communication skills.

Nice to have

• Experience reviewing AWS AgentCore Gateway or Registry environments.
• Experience with AWS WAF, AWS Security Hub, and AWS Macie.
• Experience with enterprise AI governance, cloud security monitoring, risk management, or secure AI platform adoption.
• Experience enforcing agent routing through centralized MCP hubs.

Culture & Benefits

• Vacation and state holidays according to the laws and official calendar of the country of employment.
• Health insurance for employees and their loved ones.
• Ten sick days without a doctor's note, followed by leave according to local law.
• Corporate events, colleague meet-ups, and workplace support services.
• IT certification cost coverage and access to courses and learning platforms.