> Markdown version of [/jobs/ext/4607018-ai-application-security-engineer](https://www.wearedevelopers.com/jobs/ext/4607018-ai-application-security-engineer). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# AI Application Security Engineer

- **Company:** Wintermeyer Ventures
- **Location:** San Francisco, CA, United States
- **Experience:** Expert
- **Salary:** $220,000.0 - $300,000.0
- **Contract:** Permanent contract
- **Skills:** Application Programming Interfaces (APIs), Artificial Intelligence, User Authentication, Static Program Analysis, Code Review, Continuous Integration, Internet Security, Python (Programming Language), Key Management, Machine Learning, Open Web Application Security, Systems Development Life Cycle, Software Engineering, TypeScript, Design of Telemetry/logging Agents, Delivery Pipeline, Software Security, Information Technology, Software Coding
- **Published:** November 6, 2026
- **Apply:** https://www.careerbuilder.com/job-details/ai-application-security-engineer-san-francisco-ca--46263b39-4d70-4584-99a7-85e0a2260f8d

## About the Role

Applications Security, Artificial Intelligence (AI), Software Engineering, Product Lifecycle, Machine Learning, Artificial Intelligence (AI), Applications Security, Authentication, Code Reviews, Continuous Integration, * At least 5 years of application or product security experience on production systems at scale.

 * Recent hands-on coding experience and proficiency in Python, Go, or TypeScript for security tooling and automation.
 * Strong application security fundamentals, including OWASP Top 10, AuthN/AuthZ, secure SDLC, secrets management, integration security, and cryptography basics.
 * Understanding of product-layer security risks in agentic AI, including agent design, scoping, and risk review.
 * Familiarity with compliance frameworks relevant to government and healthcare, such as FedRAMP, HIPAA, SOC 2, or ISO 27001.
 * A computer science degree or equivalent experience.

## Description

Own application and product security for AI products used in regulated environments. You will partner with product and machine learning engineers to build security into agentic workflows, integrations, and the development lifecycle., * Set secure development standards for authentication, authorization, secrets management, input handling, and secure-by-default patterns.

 * Integrate security reviews and automated checks into code review, CI/CD pipelines, and pre-deployment workflows.
 * Threat-model product features and translate identified risks into practical controls.
 * Build security tooling and automated code analysis using AI to extend review coverage.
 * Define how agents are scoped and authorized, including trust boundaries with external systems and APIs.
 * Develop secure integration patterns for credential storage, response validation, and limiting agent actions.
 * Work with product and ML engineers on tool permissions, output validation, and safe handling of user context across workflows.
 * Create reusable agent security guidelines, review checklists, and code-level guardrails.