> Markdown version of [/jobs/ext/2692060-application-security-engineer](https://www.wearedevelopers.com/jobs/ext/2692060-application-security-engineer). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Application Security Engineer

- **Company:** Source Inc.
- **Location:** New York, NY, United States
- **Experience:** Expert
- **Salary:** $180,000.0 - $190,000.0
- **Contract:** Permanent contract
- **Skills:** Artificial Intelligence, Python (Programming Language), Open Source Technology, Open Web Application Security, Software Engineering, Large Language Models, Software Security, GWAPT
- **Published:** September 3, 2026
- **Apply:** https://www.dice.com/job-detail/86b61138-8b6a-4b8d-9c3c-d46d6cfc8077

## About the Role

We need a candidate with hands on Python automation and good exp in AI/ML & LLM

 * 10-15+ years in software engineering and application security, with substantial hands-on development experience (not security-adjacent - you've shipped code).
 * Strong Python for automation and tooling.
 * Proficiency with Claude Code - you use it daily and know your way around its extensibility (skills, subagents, hooks, slash commands, and MCP integrations) to build reusable security workflows and automation, with a clear-eyed view of its strengths and failure modes.
 * Working understanding of AI agents and agentic frameworks, and the emerging security concerns around them (OWASP LLM Top 10, agent tool permissions, prompt injection, supply-chain risk in model/tooling).
 * Depth in secure SDLC, threat modeling, and common vulnerability classes (OWASP Top 10, API security, authn/authz).
 * The judgment to know when to automate, when to escalate, and when to just fix it yourself.

Nice to have

 * Experience securing production LLM/agentic systems or building internal AI security tooling.
 * Contributions to open-source security tools.
 * Relevant certifications (OSCP, GWAPT, CSSLP) - helpful, not required.



## Related Videos

- [The AI Security Survival Guide: Practical Advice for Stressed-Out Developers](https://www.wearedevelopers.com/videos/1015-the-ai-security-survival-guide-practical-advice-for-stressed-out-developers)
- [Software Security 101: Secure Coding Basics](https://www.wearedevelopers.com/videos/220-software-security-101-secure-coding-basics)
- [The Avengers Initiative (Practical Ethics for Software Engineers)](https://www.wearedevelopers.com/videos/2070-the-avengers-initiative-practical-ethics-for-software-engineers)
- [The transformative impact of GenAI for software development and its implications for cybersecurity](https://www.wearedevelopers.com/videos/952-the-transformative-impact-of-genai-for-software-development-and-its-implications-for-cybersecurity)
- [Surviving the Vulnpocalypse: Open Source and Supply Chain Security in a Post Mythos World](https://www.wearedevelopers.com/videos/100279-surviving-the-vulnpocalypse-open-source-and-supply-chain-security-in-a-post-mythos-world)
- [Unleashing the Power of Developers: Why Cybersecurity is the Missing Piece?!?](https://www.wearedevelopers.com/videos/712-unleashing-the-power-of-developers-why-cybersecurity-is-the-missing-piece)

## Related Articles

- [Dev Digest 210: AI Agents Are Go! Is MCP Dead? LLMs Crack Anonymity](https://www.wearedevelopers.com/magazine/709-dev-digest-210-ai-agents-are-go-is-mcp-dead-llms-crack-anonymity)
- [Dev Digest 134 - Where pixels sing?](https://www.wearedevelopers.com/magazine/477-dev-digest-134-where-pixels-sing)
- [Dev Digest 121 - AI goes offline](https://www.wearedevelopers.com/magazine/456-dev-digest-121-ai-goes-offline)
- [Dev Digest 138 - Are you secure about this?](https://www.wearedevelopers.com/magazine/486-dev-digest-138-are-you-secure-about-this)
- [Dev Digest 164: AI Agents, AI Blindspots and MCP security problems](https://www.wearedevelopers.com/magazine/578-dev-digest-164-ai-agents-ai-blindspots-and-mcp-security-problems)
- [Dev Digest 137 - AI'm not sure about this](https://www.wearedevelopers.com/magazine/485-dev-digest-137-ai-m-not-sure-about-this)