AI & Application Security Consultant

Integrate security testing and controls into CI/CD pipelines and software development processes. Support and mature SAST, DAST, SCA, SBOM, container scanning, dependency management, and vulnerability management capabilities. Identify, prioritize, and drive remediation of application and software supply-chain vulnerabilities. Perform security assessments of GenAI applications, LLMs, RAG solutions, AI agents, APIs, and AI/ML platforms. Conduct or support AI security testing and red teaming, including prompt injection, jailbreak, data leakage, insecure RAG, and excessive agent permissions. Review application and AI architectures for authentication, authorization, data protection, API security, guardrails, logging, and runtime security. Assess AI agents, integrations, plugins, and emerging technologies for security risks. Partner with development, DevOps, cloud, architecture, and AI teams to implement practical security controls.

5+ years of cybersecurity experience within Application Security, DevSecOps, Product Security, Cloud Security, or a related discipline. Strong experience with several of the following: SAST, DAST, SCA, SBOM, container security, CI/CD security, dependency management, and vulnerability management. Experience with cloud and development environments such as Azure, AWS, GCP, Azure DevOps, GitHub, or similar technologies. Knowledge of LLMs, Generative AI, RAG, AI agents, and associated security risks. Experience with AI security testing, GenAI security, or AI red teaming is highly preferred. Familiarity with OWASP, NIST CSF, NIST AI RMF, secure development, and threat modeling. Strong communication skills with the ability to translate technical security risks into practical recommendations.

Preferred Certifications: CISSP, CSSLP, CCSP, GIAC, or relevant cloud security certifications.