Application Security Engineer

We need a candidate with hands on Python automation and good exp in AI/ML & LLM

• 10-15+ years in software engineering and application security, with substantial hands-on development experience (not security-adjacent - you’ve shipped code).
• Strong Python for automation and tooling.
• Proficiency with Claude Code - you use it daily and know your way around its extensibility (skills, subagents, hooks, slash commands, and MCP integrations) to build reusable security workflows and automation, with a clear-eyed view of its strengths and failure modes.
• Working understanding of AI agents and agentic frameworks, and the emerging security concerns around them (OWASP LLM Top 10, agent tool permissions, prompt injection, supply-chain risk in model/tooling).
• Depth in secure SDLC, threat modeling, and common vulnerability classes (OWASP Top 10, API security, authn/authz).
• The judgment to know when to automate, when to escalate, and when to just fix it yourself.

Nice to have

• Experience securing production LLM/agentic systems or building internal AI security tooling.
• Contributions to open-source security tools.
• Relevant certifications (OSCP, GWAPT, CSSLP) - helpful, not required.