Application Security Engineer - AI & Product Security
Core
Application Security Engineer responsible for securing applications, development processes, and AI-powered products by partnering with R&D and Product teams.
Role type
Senior IC application security engineer (AI & Product Security)
Builds
Secure applications, CI/CD pipelines, security automation tooling, and AI security guardrails
Domain
Creative technology, AI/ML, cloud security
Deliverable
production ML models
Required skills
Application security, API security, CI/CD integration, cloud security (AWS/GCP/Azure), Python/Bash/Go scripting, threat modeling, secure design reviews, incident response
Preferred skills
AI/LLM security, WAF/rate limiting, SAST/SCA/DAST, AI gateways (LiteLLM/OpenRouter/Bedrock), SOC 2/ISO 27001
Technologies
Python, Bash, Go, AWS, GCP, Azure, SAST, SCA, WAF, LiteLLM, OpenRouter, Amazon Bedrock
Responsibilities
Partner with R&D on threat modeling and secure design reviews; Embed security controls into SDLC and CI/CD pipelines; Identify and remediate application and API security risks; Integrate and improve security tooling (SAST, SCA, WAF, cloud tools); Build security automation and internal tooling; Help secure cloud environments and production applications; Define security guardrails for authentication, authorization, data exposure, injection risks, and rate limiting; Contribute to security of AI-powered features (prompt injection, data leakage, model access); Support incident response and remediation
Seniority
Senior, hands-on IC
