AI & Application Security Consultant

Allied Resources Technical Consultants; Allentown (Lehigh County); Remote; USD 140,000 - 190,000; Full time

Job summary

Allied Resources Technical Consultants seeks a Senior Application & AI Security Engineer to reduce cybersecurity risk across enterprise apps, cloud platforms, and AI technologies. The role blends application security and DevSecOps with a strong focus on GenAI security, including LLMs, RAG, AI agents, and AI-enabled applications.

You will integrate security into CI/CD, mature SAST/DAST/SCA capabilities, and drive remediation of supply-chain vulnerabilities while collaborating with

Qualifications

• 5+ years of cybersecurity experience in Application Security, DevSecOps, Product Security, Cloud Security, or related area.
• Experience with SAST, DAST, SCA, SBOM, container security, CI/CD security, dependency management, and vulnerability management.
• Experience with cloud and development environments such as Azure, AWS, GCP, Azure DevOps, GitHub, or similar tech.
• Knowledge of LLMs, Generative AI, RAG, AI agents, and associated security risks.
• Experience with AI security testing, GenAI security, or AI red teaming is highly preferred.
• Familiarity with OWASP, NIST CSF, NIST AI RMF, secure development, and threat modeling.
• Strong communication skills with ability to translate security risks into practical recommendations.

Responsibilities

• Integrate security testing and controls into CI/CD pipelines and software development processes.
• Support and mature SAST, DAST, SCA, SBOM, container scanning, dependency management, and vulnerability management capabilities.
• Identify, prioritize, and drive remediation of application and software supply-chain vulnerabilities.
• Perform security assessments of GenAI applications, LLMs, RAG solutions, AI agents, APIs, and AI/ML platforms.
• Conduct or support AI security testing and red teaming, including prompt injection, jailbreak, data leakage, insecure RAG, and excessive agent permissions.
• Review application and AI architectures for authentication, authorization, data protection, API security, guardrails, logging, and runtime security.
• Assess AI agents, integrations, plugins, and emerging technologies for security risks.
• Partner with development, DevOps, cloud, architecture, and AI teams to implement practical security controls.

Skills

Application Security

DevSecOps

Cloud Security

AI/GenAI security

Security testing

Communication skills

Tools

Azure

AWS

GCP

Azure DevOps

GitHub

Job description

Senior Application & AI Security Engineer

Location: Remote

Type: Full-Time Contract

Position Overview

We are seeking a Senior Application & AI Security Engineer to help reduce cybersecurity risk across enterprise applications, software development environments, cloud platforms, and emerging AI technologies.

This role combines Application Security and DevSecOps with a strong focus on AI/GenAI security, including LLMs, RAG, AI agents, coding assistants, and AI-enabled applications.

Key Responsibilities

• Integrate security testing and controls into CI/CD pipelines and software development processes.
• Support and mature SAST, DAST, SCA, SBOM, container scanning, dependency management, and vulnerability management capabilities.
• Identify, prioritize, and drive remediation of application and software supply-chain vulnerabilities.
• Perform security assessments of GenAI applications, LLMs, RAG solutions, AI agents, APIs, and AI/ML platforms.
• Conduct or support AI security testing and red teaming, including prompt injection, jailbreak, data leakage, insecure RAG, and excessive agent permissions.
• Review application and AI architectures for authentication, authorization, data protection, API security, guardrails, logging, and runtime security.
• Assess AI agents, integrations, plugins, and emerging technologies for security risks.
• Partner with development, DevOps, cloud, architecture, and AI teams to implement practical security controls.

Qualifications

• 5+ years of cybersecurity experience within Application Security, DevSecOps, Product Security, Cloud Security, or a related discipline.
• Strong experience with several of the following: SAST, DAST, SCA, SBOM, container security, CI/CD security, dependency management, and vulnerability management.
• Experience with cloud and development environments such as Azure, AWS, GCP, Azure DevOps, GitHub, or similar technologies.
• Knowledge of LLMs, Generative AI, RAG, AI agents, and associated security risks.
• Experience with AI security testing, GenAI security, or AI red teaming is highly preferred.
• Familiarity with OWASP, NIST CSF, NIST AI RMF, secure development, and threat modeling.
• Strong communication skills with the ability to translate technical security risks into practical recommendations.

Preferred Certifications: CISSP, CSSLP, CCSP, GIAC, or relevant cloud security certifications.