> Markdown version of [/jobs/ext/3400727-application-security-engineer-appsec](https://www.wearedevelopers.com/jobs/ext/3400727-application-security-engineer-appsec). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Application Security Engineer (AppSec)

- **Company:** AuraOne Human Data
- **Location:** United States (Remote available)
- **Contract:** Permanent contract
- **Skills:** Machine Learning, Software Security, Bug Reporting
- **Published:** September 21, 2026
- **Apply:** https://www.indeed.com/viewjob?jk=066b021b69f11144

## About the Role

* Demonstrated experience red-teaming AI systems, security research, or adversarial ML work for Application Security Engineer (AppSec) work.
 * Strong written communication - your reports become the patch ticket.
 * Comfort working in policy-grey areas with clear documentation of what was attempted and why.
 * Familiarity with prompt-injection, jailbreak, and policy-bypass taxonomies.
 * Reliable async availability for at least 10 hours per week., * Background in offensive security, AppSec, or trust & safety operations.
 * Experience publishing or reproducing public adversarial-ML research.
 * Multilingual fluency for cross-language attack testing., * Adversarial prompting
 * Red-team analysis
 * Policy taxonomy
 * Failure documentation
 * Application Security Engineer evaluation

Work model

Remote - US-eligible. Remote · Independent specialist contractor. Employment type: CONTRACTOR. Applicants must be authorized to work from US.

## Description

* Design adversarial prompts that probe known weakness classes (jailbreak, policy bypass, prompt injection) for Application Security Engineer (AppSec) assignments.
 * Document every successful attack with reproduction steps and the policy clause it violated.
 * Score model defenses across single-turn and multi-turn conversations.
 * Triage emerging attack vectors and route them to the safety team with severity ratings.
 * Maintain a personal library of attack patterns and propose new red-team rubrics.
 * Calibrate against the broader red-team cohort to keep coverage and severity consistent.