> Markdown version of [/jobs/ext/4640783-staff-security-engineer-application-security-ai](https://www.wearedevelopers.com/jobs/ext/4640783-staff-security-engineer-application-security-ai). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Staff Security Engineer - Application Security & AI

- **Company:** Iceberg Inc
- **Location:** New York, NY, United States
- **Experience:** Starter
- **Contract:** Permanent contract
- **Skills:** Artificial Intelligence, User Authentication, Static Program Analysis, Code Review, Programming Tools, Web Application Security, Software Engineering, Multi-Agent Systems, Software Security, Agentic-AI, Vulnerability Analysis
- **Published:** November 8, 2026
- **Apply:** https://www.juju.com/job/28_25304_d658133f2c0c3d8e74a751bb1cfc1fe2

## About the Role

I'm representing a highly sophisticated technology driven organisation in New York that's looking to hire an experienced, hands on security engineer with strong software engineering foundations., * Strong software engineering ability, with experience writing production quality code and building security tools or capabilities.

 * Deep application security knowledge, including secure design, code review, vulnerability research and remediation.
 * A solid understanding of web application security, authentication, identity protocols and encryption.
 * Experience developing custom security tooling, scanners, analysis platforms or other security-focused software.
 * Practical experience using AI in engineering workflows, ideally including AI agents, SDKs or automated code analysis.
 * The ability to work closely with software engineers, challenge technical decisions and communicate security risks in a way that helps teams move forward.

I'm particularly interested in engineers who have worked in environments where they've been expected to build solutions rather than rely entirely on commercial security products.
This is an experienced hire, not a graduate or entry level position. I'm looking for someone who has spent time solving difficult engineering problems and can demonstrate what they've personally designed, built and delivered.

Equally, I'm not looking for someone who has moved completely away from the technology into management. This is a hands on engineering position, and the ability to write code and make complex technical decisions is essential.

## Description

The technical bar is exceptionally high, and my client wants someone who understands how applications are built, how they can be attacked and, importantly, how to engineer solutions that make them more secure.

This isn't about running security scanners, reviewing reports or simply telling developers what they need to fix.

They're looking for someone who can build security tooling, develop custom analysis capabilities and work directly with engineering teams to identify and solve complex application security problems.

One of the most interesting aspects of this opportunity is the work they're doing around AI. My client wants to use AI and autonomous agents to change how application security is delivered. That includes building workflows that continuously analyse code changes, investigate vulnerabilities, identify false positives and recommend fixes.

They also need someone who understands the security risks associated with AI-powered development tools, particularly around identity, access to sensitive data and how autonomous agents interact with internal systems.
The engineers I'm most interested in speaking to are those who can demonstrate