Security Engineer

Join a dynamic security team driving the next generation of application and AI security practices. This 12-month Security Engineer opportunity supports enterprise initiatives by strengthening secure development, validating vulnerabilities, and helping teams build safer applications and AI-enabled services. Responsibilities

• Collaborate with engineering and cybersecurity partners to evaluate and implement application and AI security practices, tooling, and operational processes.
• Review application code, APIs, automation workflows, and AI-enabled services to identify security risks and improvement opportunities.
• Analyze results from security testing tools and validate findings, including assessing impact, filtering false positives, and guiding remediation efforts.
• Support dynamic application security testing and other vulnerability assessment methods across the development lifecycle.
• Integrate and help maintain automated security testing within CI/CD pipelines and secure SDLC workflows.
• Contribute to threat modeling and security design reviews for applications, AI-enabled solutions, and machine-learning systems.
• Research emerging AI/LLM security tools, methods, and attack techniques to help advance security capabilities.
• Develop clear documentation, standards, and repeatable processes to support application security and vulnerability management.
• Participate in proof-of-concept evaluations of new security technologies and solutions.

• 4+ years of relevant technical experience in application security, product security, cybersecurity engineering, or software engineering.
• Hands-on experience validating findings from automated security tools and determining severity, impact, and remediation steps.
• Experience with dynamic application security testing and application vulnerability assessment practices.
• Ability to perform security-focused code reviews and identify common application vulnerabilities in at least one modern programming language.
• Working knowledge of OWASP Top 10, API security risks, secure coding principles, and secure SDLC practices.
• Experience supporting security activities in CI/CD pipelines and across the software development lifecycle.
• Strong communication skills with the ability to explain technical findings and recommendations to engineering teams.

Preferred Skills

• Experience in enterprise DevSecOps environments.
• Familiarity with AI/LLM security, adversarial testing concepts, or AI security frameworks.
• Experience helping secure AI-enabled applications or evaluating emerging AI-related security risks.
• Background working with AWS, Azure, or GCP environments.
• Exposure to SAST, software composition analysis, or runtime application security tools.
• Experience securing cloud-native, containerized, or Kubernetes-based applications.
• Relevant certifications such as CSSLP, CISSP, OSCP, GSEC, or GIAC application security credentials.