Senior AI - Application Security Engineer

About the role

Senior AI & Application Security Engineer Join an enterprise security team responsible for securing both traditional applications and emerging AI-enabled systems. This senior engineer will lead security initiatives across the software and AI lifecycles, including applications, models, agents, skills, and MCP integrations. What You'll Do Lead application and AI security testing using SAST, SCA, DAST, API/mobile testing, and AI red teaming. Conduct threat modeling and security assessments across applications, AI platforms, models, agents, skills, and MCP integrations. Identify and mitigate AI-specific risks including prompt injection, model abuse, insecure integrations, and data leakage. Guide development teams on secure coding, remediation, architecture, and secure-by-design practices. Evaluate and implement security tooling, including AI/MCP gateways, runtime monitoring, governance, and posture management. Automate security processes using Python, cloud services, and CI/CD pipelines. Define application and AI security standards, guardrails, and implementation guidance. Mentor junior engineers and help mature application and AI security practices. What We're Looking For 8–10 years of combined information security and software development experience. Deep knowledge of application security, AI security, threat modeling, and secure architecture. Experience with SAST, DAST, SCA, API security, mobile security, and red team tooling. Experience assessing LLM/agentic systems, AI integrations, and associated security risks. Working knowledge of cloud computing and cloud security. Strong technical communication, analytical, and problem-solving skills. Bachelor's degree in Computer Science, Information Systems, Cybersecurity, or related field, or equivalent education and experience. Nice to Have C#, Angular, and Python experience. AWS or Microsoft Azure experience. CISSP, CSSLP, GIAC, or similar security certification. Experience with AI coding assistants, MCPs, Agents, AI red teaming, and AI/MCP gateways.