> Markdown version of [/jobs/ext/4692608-application-security-ai-engineering-senior-manager](https://www.wearedevelopers.com/jobs/ext/4692608-application-security-ai-engineering-senior-manager). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Application Security & AI Engineering - Senior Manager - **Company:** Ernst & Young LLP - **Location:** Hoboken, NJ, United States - **Experience:** Expert - **Salary:** $185,800 - **Contract:** Permanent contract - **Skills:** LangGraph Framework, Kubernetes Security, Application Programming Interfaces (APIs), Artificial Intelligence, Amazon Web Services, Microsoft Azure, Burp Suite, Cloud Computing, Cloud Computing Security, Cloud Engineering, Cyber Security, Cursor, Programming Tools, Github, Microsoft Software, Open Web Application Security, Systems Development Life Cycle, OpenAI, Cloud Services, Microsoft Copilot, Software Construction, Software Engineering, Software Vulnerability Management, Web Platforms, Policy as Code, Google Cloud, GitHub Copilot, Retrieval-Augmented Generation, Delivery Pipeline, Large Language Models, Claude Code, Software Security, Mitre Att&ck, AI Coding Agents, Agentic-AI, GWAPT, Gitlab-ci, Kubernetes, Amazon Bedrock, Claude, Model Context Protocol, OpenAI Codex, Terraform, Agent SDK, Devsecops, Static Application Security Testing, Microservices, Dynamic Application Security Testing - **Published:** November 12, 2026 - **Apply:** https://dejobs.org/x/x/252DC1BE951C4380BC65CE5BA2355036/job/ ## About the Role * 10+ years of experience in application security, software engineering, cloud security, AI engineering, or cybersecurity. * Deep expertise in secure application architecture, threat modeling, vulnerability management, attack-path analysis, and Secure-by-Design principles. * Experience leading enterprise-scale Application Security, DevSecOps, or secure engineering transformation programs. * Strong understanding of cloud-native architectures, APIs, microservices, containers, and AI/GenAI technologies. * Current, hands-on experience building software with agentic development tools such as Cursor, Claude Code, and GitHub Copilot, including how to configure and secure them for enterprise use. * Excellent leadership, executive communication, client-facing, and stakeholder management capabilities. ## Description We are seeking a Senior Manager, Application Security & AI Engineering to lead the design, implementation, and transformation of secure software development and AI-enabled applications. This role will drive Secure-by-Design practices, enterprise threat modeling, DevSecOps, AI security, and GenAI governance across cloud-native and digital platforms. The role is grounded in how developers work today: in AI-assisted IDEs and agentic coding workflows, where security must be a native part of the authoring experience rather than a downstream gate., * Define and execute Application Security and AI Security strategy, architecture standards, and transformation roadmaps. * Lead Secure Software Development Lifecycle (SSDLC) and DevSecOps initiatives across product and engineering organizations. * Govern the use of AI coding assistants and autonomous coding agents across the SSDLC, defining sandboxing, credential scoping, tool-access boundaries, and review standards for AI-authored code. * Shift security review in-line to the point of authorship, embedding automated and AI-assisted review in the IDE and in pull requests so developers receive high-confidence, fix-ready feedback as they write code. * Address the risks introduced by AI-generated and prompt-driven development, including code provenance, hallucinated or typosquatted dependencies, and prompt injection reaching agents that hold repository or pipeline access. * Establish and scale threat modeling programs using STRIDE, PASTA, MITRE ATT&CK, MITRE ATLAS, attack trees, and abuse cases. * Conduct security architecture reviews and risk assessments for applications, APIs, microservices, cloud services, and AI solutions. * Design and oversee SAST, DAST, Software Composition Analysis, API Security, Container Security, and Cloud Security capabilities. * Architect secure AI and GenAI solutions, including LLM applications, copilots, Retrieval-Augmented Generation platforms, and agentic AI systems. * Develop controls for AI agents, autonomous workflows, model access, prompt security, data protection, guardrails, and responsible AI governance. * Partner with engineering, product, cloud, data, and cyber teams to embed security throughout the development lifecycle. * Mentor application security architects, AI engineers, DevSecOps professionals, and security consultants., * Threat Modeling: STRIDE, PASTA, MITRE ATT&CK, MITRE ATLAS , threat-modeling-as-code, and automated threat modeling integrated into the delivery pipeline. * Application Security: Semgrep, CodeQL, Snyk, reachability-based software composition analysis, Burp Suite, and the OWASP Top 10 for web, API, and LLM applications. * Cloud & DevSecOps: Azure, AWS, Google Cloud, Kubernetes, Terraform, GitHub Actions, GitLab CI, and Azure DevOps, with policy-as-code enforcement using OPA or Kyverno. * AI & GenAI: Azure AI Foundry, OpenAI, Anthropic, Vertex AI, Amazon Bedrock, LangGraph, OpenAI Agents SDK, Claude Agent SDK, and the Model Context Protocol. * AI-Assisted Development: Cursor, Claude Code, GitHub Copilot, and OpenAI Codex, including agent rules and context files, Model Context Protocol tooling, agent sandboxing, and in-line security review workflows. * AI Security: AI threat modeling, red teaming, prompt-injection testing, RAG security, agent security, model risk, guardrails, and responsible AI governance. Preferred Certifications CISSP, CSSLP, CCSP, CISM, GWAPT, CKS, and relevant Microsoft, AWS, Google Cloud, AI Security, or Responsible AI certifications. What You'll Bring A passion for building secure digital products and AI-powered solutions. You will help organizations reduce risk, accelerate innovation, and enable trusted AI adoption through strong threat modeling, secure engineering practices, and modern application security capabilities. Differentiator: Day-to-day, hands-on experience with agentic development tools, particularly Cursor and Claude Code alongside with experience leading enterprise Secure AI SDLC, AI Red Teaming, and AI Governance programs.