Application Security Engineer

Location: 100% remote within the United States; willingness to travel onsite is required for the position.

Salary: $160,000–$210,000 per year plus equity and 401(k) match.

Company

hirify.global is a defense technology company building agentic AI and SaaS systems to model adversary behavior and support decision-makers.

What you will do

• Implement SAST, SCA, secrets scanning, DAST, and container/IaC security checks in CI/CD pipelines.
• Partner with development teams on threat modeling, critical pull request reviews, and secure-by-default practices.
• Drive shift-left vulnerability detection and earlier remediation across the SDLC.
• Coordinate with DevOps on security issues spanning application and infrastructure layers.
• Support product incident response and incorporate lessons into code, documentation, and processes.

Requirements

• 5+ years of experience in application or product security.
• Hands-on experience securing web applications and automating application security workflows.
• Familiarity with DevSecOps, container security, and patching.
• Experience with GitHub Actions, Python, and TypeScript/JavaScript.
• Clear, concise communication skills and the ability to translate security risk for engineers.

Nice to have

• Experience securing LLM workflows.
• Experience with the NIST Risk Management Framework.
• Software security experience at a U.S. defense contractor.
• Active security clearance or ability to obtain one.

Culture & Benefits

• 100% remote work from anywhere in the United States with a flexible work environment.
• Health, dental, and vision insurance.
• 401(k) matching and equity.
• Unlimited paid time off.
• Mental health benefits.
• Pet and child care reimbursement during travel.