AI AppSec Engineer: Build Secure AI at Scale

Averity; New York (NY); On-site; USD 120,000 - 160,000; Full time

Benefits offered by this job

Health insurance

Job summary

Averity is seeking an AI (AppSec) Security Engineer to own and grow its AI security program. The role focuses on hands-on security engineering to defend AI deployments while enabling rapid adoption, with a strong emphasis on practical controls and collaboration across teams.

The ideal candidate brings 2+ years in application security, a solid understanding of AI/LLM architectures and security risks, and the ability to translate governance standards into actionable engineering controls.

Qualifications

• Strong application, product, or cloud security engineering experience.
• Solid understanding of modern AI/LLM architectures and their security risks.
• Experience with threat modeling, penetration testing, IAM, data protection, APIs, and secure system design.
• Ability to work hands-on while helping define a new security discipline.
• Strong communication skills and the judgment to balance innovation with risk.

Responsibilities

• Evaluating AI models, agents, platforms, plugins, and integrations before adoption
• Testing for prompt injection, data leakage, insecure connectors, excessive permissions, and other AI-specific vulnerabilities
• Designing security controls for internally developed AI applications
• Performing threat modeling, offensive testing, and security reviews
• Building monitoring and detection capabilities for AI-enabled threats
• Translating AI governance standards into controls that engineers can actually implement
• Partnering with engineering, security, privacy, legal, and business teams

Skills

Application security

Cloud security

Threat modeling

Penetration testing

IAM

Data protection

APIs

Security design

Job description

Averity is seeking an AI (AppSec) Security Engineer to own and grow its AI security program. The role focuses on hands-on security engineering to defend AI deployments while enabling rapid adoption, with a strong emphasis on practical controls and collaboration across teams.

The ideal candidate brings 2+ years in application security, a solid understanding of AI/LLM architectures and security risks, and the ability to translate governance standards into actionable engineering controls.