Writer

Staff Security Engineer Application Security (AI)

In short

This role leads application security for a product company, covering threat modeling, secure architecture, code review, and security testing for production systems, applications, APIs, and AI services. It involves owning the AppSec program (SAST/DAST in CI/CD), conducting penetration testing, securing AI/model environments, and researching emerging AI security threats. Requires at least 4 years of hands-on application security experience and expertise in at least two of Python, Java, Go, JavaScript, or TypeScript. The job is hybrid, based in the United States.

About the Role
You will embed security into product development by leading threat modeling, secure architecture design, code reviews, and security testing. You will build and maintain automated controls, define secure coding practices, assess applications and AI services, remediate vulnerabilities, protect data and model environments, and research emerging AI security threats.
Requirements
•At least 4 years of hands-on application security engineering experience.
•Experience securing large-scale production systems.
•Understanding of developer workflows and developer experience.
•Expertise in at least two of Python, Java, Go, JavaScript, or TypeScript.
•Ability to read and review code across multiple languages.
•Knowledge of SAST, DAST, vulnerability management, security testing frameworks, and DevSecOps.
•Ability to communicate security concepts to technical and non-technical audiences.
Responsibilities
•Conduct threat modeling sessions and design secure architectures for new features.
•Own and evolve the application security program, including SAST and DAST scanning in CI/CD pipelines.
•Perform security code reviews and build vulnerability-detection automation.
•Establish secure coding standards, reusable security patterns, and libraries.
•Design and recommend security features for customer environments.
•Use AI agents to improve security and engineering velocity.
•Lead security assessments and penetration testing of applications, AI services, and APIs.
•Implement security controls for data pipelines, model-training environments, and AI agents.
•Research emerging AI and ML security threats and build defenses.
Benefits
•Generous PTO and company holidays.
•Medical, dental, and vision coverage for employees and their families.
•16 weeks of paid parental leave.
•Fertility and family-planning support.
•Early-detection cancer testing.
•Flexible spending and dependent-care FSA options.
•Health savings account contributions for eligible plans.
•Wellness stipend.
•Company-wide and team off-sites.
•Company stock options.
•401k.

Stop applying.
Get referred.

$10 in free credits

In just 60 seconds, fully on autopilot — Eraldt's AI agents read your CV, map the roles you fit, find live vacancies and the people who can refer you, write personal emails, and get you referred.

This isn't an application: your CV doesn't go to the company, and we don't promise a referral for this exact role.

Discover who else lands interviews on autopilot