Senior Application Security Engineer — United States

AI Application Security Engineer

Remote (US)

Salary: $220,000 – $300,000 + Competitive Equity

Employment Type: Full-Time, Permanent

The Opportunity

Are you an experienced Application Security Engineer with a strong software engineering background and an understanding of the security challenges associated with agentic AI?

We're partnering with an ambitious, high-growth AI technology company looking to appoint an AI

Application Security Engineer to help secure its next generation of AI-powered products.

This is an exciting opportunity to work at the intersection of Application Security, Software Engineering and Artificial Intelligence, helping develop secure, scalable applications used by organisations operating in highly regulated industries.

You'll work closely with Software Engineers, Product Teams and AI Engineers to ensure security is embedded throughout the product development lifecycle.

This is a hands-on engineering position where you'll be expected to write code, develop security tooling, review application architecture and help establish security best practices.

A key requirement for this position is an understanding of agentic AI security at the product layer, including agent design, scoping and security risk reviews.

We're particularly interested in engineers who have secured production applications at scale and understand the emerging security risks associated with autonomous AI systems.

The Role

As an AI Application Security Engineer, you'll take ownership of application and product security across a growing portfolio of AI-powered applications.

Your responsibilities will include:

• Designing, developing and implementing security controls across production applications.

• Assessing security risks associated with agentic AI systems, including agent design, permissions, scoping and autonomous workflows.

• Conducting security risk reviews of AI-powered product features and integrations.

• Developing security tooling and automation using Python, Go or TypeScript.

• Implementing secure software development lifecycle (SDLC) practices across engineering teams.

• Conducting application threat modelling, security architecture reviews and code reviews.

• Identifying and mitigating vulnerabilities relating to authentication, authorisation, secrets management and API security.

• Developing secure integration patterns for AI agents interacting with internal systems, external APIs and third-party services.

• Working closely with Software Engineers and AI/ML teams to embed security throughout the development lifecycle.

• Implementing automated security testing and vulnerability detection capabilities.

• Supporting secure CI/CD pipelines and deployment processes.

• Establishing security standards and best practices for AI-powered applications.

• Helping ensure applications meet security requirements within regulated environments.

• Proactively identifying security risks and developing practical engineering solutions.

What We're Looking For

We're looking for an experienced Application Security Engineer or Product Security Engineer who combines strong security fundamentals with hands-on software engineering capabilities.

Essential Experience – Must Have

• 5+ years of professional experience in Application Security or Product Security Engineering.

• Proven experience securing production applications or products operating at scale.

• Understanding of the security surface of agentic AI across the product layer, including agent design, scoping and security risk reviews.

• Strong programming skills in Python, Go or TypeScript, with experience developing security tooling and automation.

• Deep understanding of application security fundamentals, including OWASP Top 10.

• Strong knowledge of authentication, authorisation and access control (AuthN/AuthZ).

• Experience implementing secure software development lifecycle (SDLC) practices.

• Strong understanding of secrets management, secure integration patterns and cryptography fundamentals.

• Experience conducting application threat modelling, security architecture reviews and vulnerability assessments.

• Ability to identify and assess security risks within modern software applications.

• Experience working collaboratively with Software Engineers and Product Teams to implement practical security solutions.

• Strong communication skills and the ability to explain complex security risks to technical stakeholders.

Important: Understanding agentic AI security is a mandatory requirement. Candidates must be comfortable discussing the security implications of AI agent design, permission boundaries, operational scoping and product-level risk assessments.

Desirable Experience

We'd also be particularly interested in candidates with:

• Hands-on experience securing AI-powered applications, LLM products or autonomous AI agents.

• Experience developing security controls specifically for agentic AI workflows.

• Knowledge of prompt injection, agent privilege escalation and AI-specific attack surfaces.

• Experience developing automated security tooling and internal security platforms.

• Familiarity with SAST, DAST and automated application security testing.

• Experience working with sensitive customer information, including healthcare or financial data.

• Knowledge of compliance frameworks including FedRAMP, HIPAA, SOC 2 or ISO 27001.

• Previous experience working within government, healthcare, financial services or other regulated environments.

• Experience working within high-growth technology startups.

• Familiarity with AI-assisted software development and security tooling.

Technology Environment

You'll be working across a modern application security and software engineering environment, including:

Programming & Automation: Python, Go, TypeScript

Application Security: OWASP Top 10, Secure SDLC, Threat Modelling, Authentication, Authorisation

AI Security: Agentic AI, Agent Design, Agent Scoping, Security Risk Reviews, Secure AI Integrations

Security Engineering: Secrets Management, Cryptography, API Security, Security Automation

DevSecOps: CI/CD Security, Automated Security Testing, Secure Deployment Pipelines

Compliance & Governance: FedRAMP, HIPAA, SOC 2, ISO 27001

About You

We're looking for someone who enjoys solving complex security challenges through engineering rather than simply identifying vulnerabilities.

You'll be someone who:

• Has a genuine interest in AI security and understands the risks associated with autonomous AI systems.

• Enjoys writing code and building practical security solutions.

• Understands how to balance strong security controls with fast-moving product development.

• Can assess the security implications of AI agent design and integration decisions.

• Takes ownership of security challenges from initial assessment through to implementation.

• Works collaboratively with Software Engineers, Product Managers and AI specialists.

• Can clearly communicate technical security risks and recommendations.

• Thrives in a fast-paced engineering environment.

• Has a proactive approach to identifying and mitigating emerging security threats.

Why Consider This Opportunity?

This is an excellent opportunity to join a rapidly growing AI technology company at an exciting stage of its development.

You'll benefit from:

• Competitive salary of $220,000 – $300,000

• Competitive equity package

• Hybrid working in San Francisco or remote opportunities across the US and UK

• Opportunity to work on cutting-edge AI and agentic AI applications

• Significant ownership of application and product security

• Direct collaboration with experienced Software Engineers and AI/ML teams

• Opportunity to develop security tooling and engineering standards

• Exposure to complex security challenges within highly regulated industries

• The ability to influence security architecture across AI-powered products

• Opportunity to work on technology supporting enterprise and government applications

Location & Working Arrangements

The position offers flexible working arrangements:

Eligible visa transfers, including H-1B transfers, may be considered.

Interested?

If you're an experienced Application Security Engineer, Product Security Engineer or Software Security Engineer with strong programming skills and an understanding of agentic AI security, we'd love to hear from you.

We're particularly interested in candidates who have secured production applications at scale and understand the security challenges associated with AI agent design, scoping and risk assessment.

Apply today with your latest resume for a confidential discussion.