AI AppSec Engineer Lead

Capital Group; Charlotte (NC); On-site; USD 194,706 - 311,530; Full time

Benefits offered by this job

Generous time-off and health benefits

2-for-1 charitable gifts matching

On-demand professional development

Job summary

Capital Group seeks an experienced security professional to lead protection of custom and procure AI solutions across our enterprise platforms. The role collaborates with platform, security, and risk engineering teams to embed secure practices into the AI development lifecycle.

The Lead AI AppSec Engineer will champion AI security principles organization-wide, drive automated security checks in the AI SDLC, and work with stakeholders to model threats and respond to AI incidents.

Qualifications

• 8+ years in information security or related fields.
• Strong AI safety knowledge including LLM risks.
• 5+ years automating security checks into CI/CD pipelines (SAST/SCA/DAST).
• Experience with threat modeling frameworks (STRIDE) and agile workflows (Scrum, Kanban).
• Programming proficiency in Python, Java, or .NET.
• Excellent collaboration and stakeholder management.
• Strong communication of security risks to leadership.

Responsibilities

• Embed automated security checks into the AI SDLC and ML‑Ops.
• Threat model complex AI systems with developers and architects.
• Review code for security vulnerabilities in AI-driven systems.
• Lead information security policy and standard setting for AI with risk org.
• Act as AI/Agent security SME for incidents and incident response playbooks.

Skills

Threat modeling

CI/CD security automation

Programming: Python/Java/.NET

Stakeholder collaboration

Tools

SAST

SCA

DAST

Job description

Lead AI AppSec Engineer

Capital Group seeks an experienced security professional to lead the protection of custom and procure AI solutions across our enterprise platforms. The role involves collaborating with platform, security, and risk engineering teams to embed secure practices into the entire AI development lifecycle and promote AI security principles organization‑wide.

Responsibilities

• Procure and/or build technical solutions to embed automated security checks into the AI SDLC and ML‑Ops.
• Threat model complex Agentic AI systems and design security requirements collaboratively with developers, architects, and business stakeholders.
• Review code for security vulnerabilities within the context of AI‑driven systems.
• Provide thought leadership on Information Security policies and standards for AI in collaboration with Technology Risk.
• Serve as an AI/Agent subject‑matter expert for incidents and security reviews, and help develop incident response playbooks for AI‑related security incidents.

Qualifications

• 8+ years of experience in information security, application security, platform security, penetration testing, DevSecOps, network security, or related disciplines.
• Strong knowledge of AI safety risks for large language models and AI agents (e.g., OWASP LLM Top 10).
• 5+ years of experience automating security checks—including SAST, SCA, and DAST—directly into CI/CD pipelines.
• Extensive experience with threat modeling frameworks such as STRIDE and agile workflows (Scrum, Kanban).
• Proficiency in at least one programming language (Python, Java, .NET).
• Excellent partner and collaborator skills with stakeholder teams.
• Strong communication skills and ability to present security risks to leadership.

Preferred Qualifications

• Knowledge of Kubernetes, containers, CI/CD, and cloud service providers.
• Familiarity with key AI platform components such as AI gateways, model orchestration tools (LangChain, LlamaIndex, etc.).
• Understanding of AI regulatory frameworks such as NIST AI RMF, MITRE ATLAS, GDPR, and the EU AI Act.
• Information Security certifications (CISSP, SANS GIAC, CISA, etc.).

Benefits

• Generous time‑away and health benefits from day one, with flexible work options.
• 2‑for‑1 matching gifts for charitable contributions and annual grants for chosen organizations.
• On‑demand professional development resources to hone existing skills and learn new ones.

Compensation

Base salary ranges by location:
Charlotte: $194,706 – $311,530
Southern California: $226,893 – $363,029
New York: $240,519 – $384,830

In addition to a competitive base salary, eligible employees will receive an individual annual performance bonus, Capital’s annual profitability bonus, and a retirement plan with a 15% company contribution.

Equal Opportunity Employer

We are an equal‑opportunity employer and comply with all federal, state, and local laws that prohibit discrimination in all employment decisions. Our policies prohibit unlawful discrimination on the basis of race, religion, color, national origin, ancestry, sex (including gender and gender identity), pregnancy, childbirth and related medical conditions, age, physical or mental disability, medical condition, genetic information, marital status, sexual orientation, citizenship status, HIV status, political activities or affiliations, military or veteran status, and any other characteristic protected by law.