AI Security Engineer: Secure AI DevSecOps & Threat Modeling

Careersatagoda; Singapore; On-site; SGD 122,000 - 182,000; Full time

Job summary

Agoda's AppSec Engineering team seeks an AI Security Engineer to build AI-powered security capabilities in a fast-paced DevSecOps environment. You will own production systems and drive secure-by-design practices for AI agents and LLM-powered tooling.

Bring 3+ years SDLC experience in Python/Go/TypeScript, 6+ years in security, and hands-on cloud/LLM security. You will collaborate with product, data, and engineering teams, advance threat modeling, and defend against prompt injection and data

Qualifications

• 3+ years of SDLC experience in Python, Go, TypeScript/Node.js, Kotlin, or similar.
• 6+ years of security engineering, application security, threat modeling, or related areas.
• 2+ years of cloud environments and hands-on experience with LLM-enabled applications, agents, or evaluation pipelines.
• Strong knowledge of OWASP Top 10 vulnerabilities and secure coding practices.

Responsibilities

• Design, build, and operate AI-powered security engineering systems end-to-end in production.
• Build AI-assisted threat modeling for design reviews and high-risk changes.
• Harden AI developer platforms and agent platforms (Cursor, Codex, Claude).
• Lead security design reviews and threat modeling for AI systems and agents.
• Define and implement security controls and guardrails for AI agents.
• Develop defenses against prompt injection and data exfiltration in AI tools.
• Build agentic security tooling to automate AppSec workflows end-to-end.
• Measure and improve the quality of AI security tooling and pipelines.
• Collaborate with product, platform, data, and AI teams as an embedded security owner.
• Stay ahead of AI security research and share learnings across Agoda's engineering community.

Skills

Software engineering

Python

Go

TypeScript/Node.js

Security engineering

Threat modeling

OAuth 2.0/OIDC

Cloud security

LLM security

CI/CD security tooling

AI governance

Tools

Cursor

Codex

Claude

Job description

Agoda's AppSec Engineering team seeks an AI Security Engineer to build AI-powered security capabilities in a fast-paced DevSecOps environment. You will own production systems and drive secure-by-design practices for AI agents and LLM-powered tooling.

Bring 3+ years SDLC experience in Python/Go/TypeScript, 6+ years in security, and hands-on cloud/LLM security. You will collaborate with product, data, and engineering teams, advance threat modeling, and defend against prompt injection and data