Sr. Security Engineer II

Insurance plays an important role in people’s lives, providing protection and peace of mind through life’s adventures and unexpected turns. In the moments that matter, people want to know their insurer is there for them. At Hi Marley, we help insurers deliver on that promise through communication that brings greater clarity and connection to the policyholder experience.

About the role

Our teams are building LLM integrations, agents, and MCP connectors into the tools they use every day, and you'll make sure they do it securely. You'll work side by side with the people building those tools, shaping the security architecture of our corporate and cloud environment and writing the guardrails that let teams move quickly without reinventing controls. You don't need to be an AI security specialist. If you think in systems, write real code, and want to learn the AI attack surface by doing, you'll love this role.

What you'll do

• Shape the security architecture of our corporate and cloud environment, from identity and SaaS configuration to the AWS accounts behind our business and AI tools
• Build guardrails as code with Terraform and policy tooling, and lead threat modeling and design reviews before new tools go live
• Secure our agentic workloads with isolation, scoped credentials, and data boundaries, and help test them against risks like prompt injection
• Design controls that produce audit evidence by default for our SOC 2 Type II and ISO 42001 programs

What you'll bring

• 5+ years in security engineering, cloud security, or infrastructure security, including leading threat modeling and design reviews
• Hands-on experience securing AWS and corporate identity, plus strong Python and security controls built as code with Terraform or similar
• A track record running vulnerability management and producing audit evidence for SOC 2, ISO 27001, or a similar framework, and explaining risk clearly to engineers and auditors alike
• Real interest in how AI changes the attack surface, and able to work from our Boston office 3 days a week

Nice to have

• Experience securing LLM-based systems, agent frameworks, or MCP connectors
• Familiarity with ISO/IEC 42001 or the NIST AI RMF
• Detection engineering or SIEM experience in cloud and SaaS environments

Compensation, Benefits & Perks:

At Hi Marley, we are committed to fair and transparent pay practices. The annual base salary for this role is expected to fall within the range of [$121,000-$200,000], depending on experience, skills, qualifications, and location. Offers are determined based on these factors as well as internal peer equity. It's most common for new hires to start near the midpoint of the range, allowing room for growth as employees develop in their role.

In addition to base pay, we support your wellbeing and growth with:

• Equity grants for all employees
• 401(k) with a 4% employer match
• Medical, dental, vision, disability, and life insurance for employees working 30+ hours per week
• Monthly wellness and annual professional development stipends
• Paid parental leave
• Flexible Time Off to recharge, plus enjoy Wind-down Week, our annual year-end company shutdown

Who We Are:

Three core values guide how we work:

• Max Courage: Dream big, try new ideas, and take measured risks to maximize impact.
• Be Humble: Lead with appreciation, compassion, and openness to learn from anyone, anywhere.
• Ubuntu: Align behind a shared purpose to achieve our fullest potential together.

Life at Hi Marley combines meaningful work with clear expectations. We communicate openly and with care, stay curious, take ownership, and value every perspective. Our flexible, hybrid environment is built on trust, accountability, and mutual support—both at work and when life needs our attention.

Hi Marley is proud to be an equal employment opportunity employer. We celebrate diversity and do not discriminate based on gender, sexual orientation, gender identity, religion, race, veteran status, disability status, or any other characteristic protected by applicable law. We are committed to building an inclusive work environment representing a variety of backgrounds, perspectives, and skills, where all employees are encouraged to be their authentic selves.