Job Description

Senior AI & Application Security Engineer

Join an enterprise security team responsible for securing both traditional applications and emerging AI-enabled systems. This senior engineer will lead security initiatives across the software and AI lifecycles, including applications, models, agents, skills, and MCP integrations.

What You'll Do

• Lead application and AI security testing using SAST, SCA, DAST, API/mobile testing, and AI red teaming.
• Conduct threat modeling and security assessments across applications, AI platforms, models, agents, skills, and MCP integrations.
• Identify and mitigate AI-specific risks including prompt injection, model abuse, insecure integrations, and data leakage.
• Guide development teams on secure coding, remediation, architecture, and secure-by-design practices.
• Evaluate and implement security tooling, including AI/MCP gateways, runtime monitoring, governance, and posture management.
• Automate security processes using Python, cloud services, and CI/CD pipelines.
• Define application and AI security standards, guardrails, and implementation guidance.
• Mentor junior engineers and help mature application and AI security practices.

What We're Looking For

• 8–10 years of combined information security and software development experience.
• Deep knowledge of application security, AI security, threat modeling, and secure architecture.
• Experience with SAST, DAST, SCA, API security, mobile security, and red team tooling.
• Experience assessing LLM/agentic systems, AI integrations, and associated security risks.
• Working knowledge of cloud computing and cloud security.
• Strong technical communication, analytical, and problem-solving skills.
• Bachelor's degree in Computer Science, Information Systems, Cybersecurity, or related field, or equivalent education and experience.

Nice to Have

• C#, Angular, and Python experience.
• AWS or Microsoft Azure experience.
• CISSP, CSSLP, GIAC, or similar security certification.
• Experience with AI coding assistants, MCPs, Agents, AI red teaming, and AI/MCP gateways.