Staff Engineer, Application Security (Remote, US)
Core
Define and drive company-wide security strategy for applications, cloud infrastructure, and AI systems, including security architecture reviews, threat modeling, and AI guardrails.
Role type
Staff Application Security Engineer (Strategy & Hands-on)
Builds
Secure-by-default patterns, security guardrails for AI/LLM applications, and scalable cloud security controls.
Domain
Application Security, Cloud Security, AI Security
Deliverable
production ML models
Required skills
Application and API security, Cloud security (AWS/GCP), AI and agentic security, Secure software development lifecycle (SDLC), Vulnerability management, Security architecture design, Incident response, Networking and core Internet protocols
Preferred skills
SOC 2/ISO 27001 compliance, AI-assisted security tools, Static and dynamic application security testing
Technologies
AWS (IAM, WAF, GuardDuty, Inspector), CodeQL, Burp Suite, Zap, Nuclei, LLMs, MCP
Responsibilities
Lead cross-functional security initiatives, conduct security architecture reviews and threat modeling, implement security guardrails for AI agents, improve cloud and infrastructure security posture, manage vulnerability lifecycle, mentor engineering teams on security culture.
Seniority
Staff, strategic leadership with hands-on engineering
