Application Security Engineer

Job description

Accountabilities Apply and maintain secure software development practices, including code reviews and security testing integrated into CI/CD pipelines. Identify, validate, prioritize, and triage application vulnerabilities using automated security tools and manual testing techniques. Support Shift Left security initiatives by helping development teams adopt secure coding practices and remediate identified vulnerabilities. Support Security Champions programs by answering development-team questions and helping deliver security training. Assist developers with vulnerability reproduction, risk assessment, and remediation guidance, escalating complex or high-risk issues when appropriate. Operate, tune, maintain, and improve application security tools, including open-source solutions. Collaborate with product, engineering, DevOps, and compliance stakeholders to incorporate security requirements into application architecture and design. Participate in threat modeling, security design reviews, recurring security assessments, and vulnerability testing. Maintain security control documentation, testing evidence, findings, and remediation guidance. Apply secure development standards to AI-enabled applications, including LLM integrations, RAG pipelines, and agentic workflows. Configure, test, and monitor AI security guardrails, including prompt-injection defenses, input/output validation, least-privilege controls, and data-loss prevention measures. Conduct AI red-team testing covering prompt injection, jailbreaks, sensitive-data exposure, insecure outputs, and excessive agency, using recognized security frameworks such as OWASP Top 10 for LLM Applications and MITRE ATLAS. Support security reviews of new AI use cases and third-party AI capabilities, including controls protecting nonpublic personal information. Help establish secure-use practices for AI coding assistants, including appropriate human review and security scanning of AI-generated code. Assist incident response teams with investigation and remediation of application-related security incidents. Monitor emerging application and AI security threats and contribute to security awareness and compliance initiatives. Requirements Bachelor’s degree in Computer Science, Software Engineering, Cybersecurity, or a related discipline preferred; equivalent education and experience may be considered. At least 3 years of experience as a software developer or in a comparable technical role. Experience with application security, secure software development, vulnerability management, code review, or security testing is highly relevant. Familiarity with automated and manual application security testing methodologies. Experience with AI/LLM security concepts, including prompt injection, jailbreaks, RAG security, agentic workflows, and AI guardrails, is valuable. Familiarity with OWASP application security principles and emerging AI security frameworks such as OWASP Top 10 for LLM Applications and MITRE ATLAS. Certifications such as Burp Suite Certified Practitioner, Hack The Box Certified Web Exploitation Specialist (HTB CWES), or Practical Web Pentest Professional (PWPP) are preferred. Strong analytical, troubleshooting, organizational, and problem-solving skills, with the ability to manage multiple priorities. Excellent written and verbal communication skills and the ability to explain technical security concepts clearly to developers and business stakeholders. Ability to work effectively both independently and collaboratively in a fast-paced, metrics-driven environment. Strong attention to detail and sound judgment when handling confidential or sensitive information. Proficiency with Microsoft Office, collaborative cloud platforms, wikis, and third-party software applications. Demonstrated commitment to integrity, customer service, respect, collaboration, continuous learning, and high-quality work. Ability to learn new technologies, maintain focus, work independently, and make timely decisions within established workflows. Comfortable working remotely with limited travel, generally no more than 5%. Availability to work primarily Monday through Friday during standard business-week schedules. Must be legally authorized to work in the United States without requiring immigration sponsorship. Benefits Targeted annual salary range of $82,000–$118,000, with actual compensation influenced by experience, education, qualifications, and geographic location. Medical, dental, and vision insurance. Life insurance and AD&D coverage. Long-term disability insurance. 401(k) retirement plan with employer matching. Fully remote work environment. Primarily Monday–Friday schedule. Professional development opportunities within an evolving application and AI security environment. Supportive work culture emphasizing integrity, collaboration, learning, customer service, and excellence. Primarily sedentary work-from-home environment with limited travel requirements. How Jobgether works: We use an AI-powered matching process to ensure your application is reviewed quickly, objectively, and fairly against the role's core requirements. Our system identifies the top-fitting candidates, and this shortlist is then shared directly with the hiring company. The final decision and next steps (interviews, assessments) are managed by their internal team. We appreciate your interest and wish you the best! Why Apply Through Jobgether? Data Privacy Notice: By submitting your application, you acknowledge that Jobgether will process your personal data to evaluate your candidacy and share relevant information with the hiring employer. This processing is based on legitimate interest and pre-contractual measures under applicable data protection laws (including GDPR). You may exercise your rights (access, rectification, erasure, objection) at any time. #LI-CL1 This position is listed on behalf of a partner company, who manages all applications and next steps. Our partner is looking for an Application Security Engineer based in the United States. This role helps strengthen application security across modern software environments, including AI-enabled applications and services.You will embed security throughout the development lifecycle through code reviews, automated testing, manual assessments, and secure design practices.The position offers exposure to emerging AI security challenges, including LLM applications, RAG pipelines, and agentic workflows.You’ll partner closely with engineering, product, DevOps, compliance, and incident response teams to identify and reduce risk.A key focus will be enabling developers to understand vulnerabilities and adopt practical, secure development practices.You’ll also contribute to threat modeling, AI red teaming, security tooling, and the organization’s broader security awareness efforts.This is a remote opportunity for a developing security professional seeking meaningful hands-on experience in application and AI security.