Application Security Engineer
*AI Security Engineer / Application Security Engineer*
*Location: *Onsite in Seattle, Washington and Sunnyvale, California. Local candidates are required.
*Position Type- *Contract
Any Visa Will work
Only W2 Pay rate
Role Overview
We are seeking an experienced *AI Security / Application Security Engineer* to strengthen our security engineering capabilities across application security, cloud services, APIs, and AI/LLM integrations. The ideal candidate will have hands-on experience in security architecture reviews, threat modeling, vulnerability assessment, penetration testing, and adversarial testing of AI agents.
Key Responsibilities
* Conduct *security and privacy design reviews* for applications, APIs, cloud services, engineering proposals, and AI integrations.
* Review system architecture, data flows, access controls, trust boundaries, authentication, authorization, and security safeguards.
* Perform *threat modeling* for critical services and AI agents, identifying attack surfaces, attack scenarios, attack paths, mitigations, and residual risks.
* Conduct hands-on *security and adversarial testing* of AI/LLM agents, including:
* Prompt injection
* Tool misuse
* Excessive agency
* Unauthorized data access
* Permission and access-control issues
* External integrations
* Sensitive-data exposure
* Identify, validate, and document security vulnerabilities and provide practical remediation recommendations.
* Work closely with engineering, security, privacy, and third-party teams to drive remediation and validate security controls.
* Develop reusable security assessment methodologies, checklists, threat models, test cases, and reporting templates.
* Support security automation and AI-assisted security workflows where appropriate.
Required Qualifications
* *8+ years of professional experience* in security engineering, application security, product security, offensive security, systems architecture, or a related technical security field.
* Experience reviewing complex technical designs and identifying security risks in:
* Applications
* APIs
* Cloud services
* Microservices
* Distributed systems
* Strong understanding of:
* Threat modeling
* Vulnerability assessment
* Risk modeling
* Authentication and authorization
* Least-privilege principles
* Data protection
* Security architecture
* Hands-on experience with security testing, vulnerability investigation, penetration testing, adversarial testing, or security-control validation.
* Strong technical communication skills with the ability to explain security findings to engineering and business stakeholders.
Preferred Qualifications
* Experience assessing *AI/LLM applications and autonomous AI agents*.
* Knowledge of *prompt injection, jailbreaks, unsafe tool use, excessive agency, and AI data-security risks*.
* Experience with privacy and security design reviews.
* Experience securing cloud environments.
* Security automation experience using *Python, Go, Bash, or similar languages*.
* Familiarity with application-security frameworks and industry security practices.
Key Skills
*Application Security | AI/LLM Security | Threat Modeling | Penetration Testing | Adversarial Testing | Cloud Security | API Security | Security Architecture | Vulnerability Assessment | Privacy & Data Protection | Python/Go/Bash | Security Automation*
Pay: $50.00 - $55.00 per hour
Experience:
* AI Security Engineer: 10 years (Preferred)
* Application Security Engineer: 10 years (Preferred)
* cloud services: 10 years (Preferred)
* APIs: 10 years (Preferred)
* AI/LLM integration: 10 years (Preferred)
* Python: 10 years (Preferred)
* Go: 10 years (Preferred)
* threat modeling: 10 years (Preferred)
* vulnerability assessment: 10 years (Preferred)
* penetration testing: 10 years (Preferred)
* adversarial testing of AI agents: 10 years (Preferred)
* security architecture reviews: 10 years (Preferred)
Work Location: In person