Sr. Security Engineer II

Our teams are building LLM integrations, agents, and MCP connectors into the tools they use every day, and you’ll make sure they do it securely. You’ll work side by side with the people building those tools, shaping the security architecture of our corporate and cloud environment and writing the guardrails that let teams move quickly without reinventing controls. You don’t need to be an AI security specialist. If you think in systems, write real code, and want to learn the AI attack surface by doing, you’ll love this role.

We spend Mondays, Tuesdays, and Thursdays together in our Boston office to connect, collaborate, and learn from one another. Recurring meetings generally fall between 9:30am and 4:30pm, allowing flexibility around the start and end of your day. Wednesdays and Fridays are remote. What You’ll Do

• Shape the security architecture of our corporate and cloud environment, from identity and SaaS configuration to the AWS accounts behind our business and AI tools
• Build guardrails as code with Terraform and policy tooling, and lead threat modeling and design reviews before new tools go live
• Secure our agentic workloads with isolation, scoped credentials, and data boundaries, and help test them against risks like prompt injection
• Design controls that produce audit evidence by default for our SOC 2 Type II and ISO 42001 programs

• 5+ years in security engineering, cloud security, or infrastructure security, including leading threat modeling and design reviews
• Hands-on experience securing AWS and corporate identity, plus strong Python and security controls built as code with Terraform or similar
• A track record running vulnerability management and producing audit evidence for SOC 2, ISO 27001, or a similar framework, and explaining risk clearly to engineers and auditors alike
• Real interest in how AI changes the attack surface, and able to work from our Boston office 3 days a week

Nice to Have

• Experience securing LLM-based systems, agent frameworks, or MCP connectors
• Familiarity with ISO/IEC 42001 or the NIST AI RMF
• Detection engineering or SIEM experience in cloud and SaaS environments

At Hi Marley, we are committed to fair and transparent pay practices. The annual base salary for this role is expected to fall within the range of [$121,000-$200,000], depending on experience, skills, qualifications, and location. Offers are determined based on these factors as well as internal peer equity. It’s most common for new hires to start near the midpoint of the range, allowing room for growth as employees develop in their role.

In addition to base pay, we support your wellbeing and growth with:

• Equity grants for all employees
• 401(k) with a 4% employer match
• Medical, dental, vision, disability, and life insurance for employees working 30+ hours per week
• Monthly wellness and annual professional development stipends
• Paid parental leave
• Flexible Time Off to recharge, plus enjoy Wind-down Week, our annual year-end company shutdown

Three core values guide how we work:

• Max Courage: Dream big, try new ideas, and take measured risks to maximize impact.
• Be Humble: Lead with appreciation, compassion, and openness to learn from anyone, anywhere.
• Ubuntu: Align behind a shared purpose to achieve our fullest potential together.

Life at Hi Marley combines meaningful work with clear expectations. We communicate openly and with care, stay curious, take ownership, and value every perspective. Our flexible, hybrid environment is built on trust, accountability, and mutual support-both at work and when life needs our attention.

Hi Marley is proud to be an equal employment opportunity employer. We celebrate diversity and do not discriminate based on gender, sexual orientation, gender identity, religion, race, veteran status, disability status, or any other characteristic protected by applicable law. We are committed to building an inclusive work environment representing a variety of backgrounds, perspectives, and skills, where all employees are encouraged to be their authentic selves.