Senior AI & Application Security EngineerJoin an enterprise security team responsible for securing both traditional applications and emerging
AI-enabled systems. This senior engineer will lead security initiatives across the software and AI lifecycles, including applications, models, agents, skills, and
MCP integrations.
What You'll Do- Lead application and AI security testing using SAST, SCA, DAST, API/mobile testing, and AI red teaming.
- Conduct threat modeling and security assessments across applications, AI platforms, models, agents, skills, and MCP integrations.
- Identify and mitigate AI-specific risks including prompt injection, model abuse, insecure integrations, and data leakage.
- Guide development teams on secure coding, remediation, architecture, and secure-by-design practices.
- Evaluate and implement security tooling, including AI/MCP gateways, runtime monitoring, governance, and posture management.
- Automate security processes using Python, cloud services, and CI/CD pipelines.
- Define application and AI security standards, guardrails, and implementation guidance.
- Mentor junior engineers and help mature application and AI security practices.
What We're Looking For- 8-10 years of combined information security and software development experience.
- Deep knowledge of application security, AI security, threat modeling, and secure architecture.
- Experience with SAST, DAST, SCA, API security, mobile security, and red team tooling.
- Experience assessing LLM/agentic systems, AI integrations, and associated security risks.
- Working knowledge of cloud computing and cloud security.
- Strong technical communication, analytical, and problem-solving skills.
- Bachelor's degree in Computer Science, Information Systems, Cybersecurity, or related field, or equivalent education and experience.
Nice to Have- C#, Angular, and Python experience.
- AWS or Microsoft Azure experience.
- CISSP, CSSLP, GIAC, or similar security certification.
- Experience with AI coding assistants, MCPs, Agents, AI red teaming, and AI/MCP gateways.