Application Security Engineer II
Core
Secure AI-powered systems (LLM-integrated features, agentic workflows, MCP connectors) against threats like prompt injection at production scale by integrating security into the software development lifecycle.
Role type
Senior individual contributor application security engineer (AI/ML focus)
Builds
Security tooling and integrations for CI/CD pipelines, automated security testing, and secure development practices for AI-native systems
Domain
Cloud-native security, AI/ML security, Application Security
Deliverable
production ML models | product features | dashboards & analysis
Required skills
Application security engineering, threat modeling, security architecture reviews, secure coding practices, AI/ML system security (prompt injection, model supply chain), web application security (OWASP Top 10, auth/authorization, cryptography), API security, microservices/container/cloud-native security, Python/Go/Java/JavaScript/TypeScript programming
Preferred skills
Startup environment experience, commercial security tools (Veracode, Checkmarx, SonarQube, Wiz, Semgrep, Burp Suite), security telemetry pipelines, vulnerability management frameworks, compliance frameworks (SOC 2, ISO 27001), bug bounty programs
Technologies
AWS, LLMs, MCP connectors, CI/CD pipelines, Python, Go, Java, JavaScript/TypeScript, OWASP Top 10, Burp Suite, Semgrep, Wiz, SonarQube, Checkmarx, Veracode
Responsibilities
Lead threat modeling and security architecture reviews for AI-powered features, architect and maintain security tooling in CI/CD pipelines, design and deploy automated security testing, contribute to security incident response, coach developers on secure coding and threat modeling, define and track security posture metrics
Seniority
Senior, hands-on IC
