AI AppSec Engineer Lead

Capital Group; New York (NY); On-site; USD 240,519 - 384,830; Full time

Benefits offered by this job

Generous time-off

Health benefits

2-for-1 gifts

Professional development

Job summary

Capital Group seeks an experienced security professional to lead the protection of custom and procure AI solutions across our enterprise platforms in New York. You will embed secure practices into the AI development lifecycle and promote AI security principles organization-wide.

You will collaborate with platform, security, and risk engineering teams to embed automated checks into the AI SDLC, perform threat modeling, review code for AI vulnerabilities, and shape incident response playbooks for

Qualifications

• 8+ years in information security, app security, or related fields.
• Expertise in AI safety risks and OWASP LLM Top 10.
• 5+ years automating security checks into CI/CD pipelines.
• Experience with STRIDE and agile workflows.
• Proficiency in Python, Java, or .NET.

Responsibilities

• Embed automated security checks into AI SDLC/ML‑Ops.
• Threat model AI systems and define security requirements.
• Review AI code for security vulnerabilities.
• Lead AI security policy alignment with Risk/Tech teams.
• Develop incident playbooks for AI security incidents.

Skills

Information security

Threat modeling

CI/CD security

Programming languages

Leadership

Communication

Tools

SAST

SCA

DAST

Threat modeling frameworks

Job description

Lead AI AppSec Engineer

Capital Group seeks an experienced security professional to lead the protection of custom and procure AI solutions across our enterprise platforms. The role involves collaborating with platform, security, and risk engineering teams to embed secure practices into the entire AI development lifecycle and promote AI security principles organization‑wide.

Responsibilities

• Procure and/or build technical solutions to embed automated security checks into the AI SDLC and ML‑Ops.
• Threat model complex Agentic AI systems and design security requirements collaboratively with developers, architects, and business stakeholders.
• Review code for security vulnerabilities within the context of AI‑driven systems.
• Provide thought leadership on Information Security policies and standards for AI in collaboration with Technology Risk.
• Serve as an AI/Agent subject‑matter expert for incidents and security reviews, and help develop incident response playbooks for AI‑related security incidents.

Qualifications

• 8+ years of experience in information security, application security, platform security, penetration testing, DevSecOps, network security, or related disciplines.
• Strong knowledge of AI safety risks for large language models and AI agents (e.g., OWASP LLM Top 10).
• 5+ years of experience automating security checks—including SAST, SCA, and DAST—directly into CI/CD pipelines.
• Extensive experience with threat modeling frameworks such as STRIDE and agile workflows (Scrum, Kanban).
• Proficiency in at least one programming language (Python, Java, .NET).
• Excellent partner and collaborator skills with stakeholder teams.
• Strong communication skills and ability to present security risks to leadership.

Preferred Qualifications

• Knowledge of Kubernetes, containers, CI/CD, and cloud service providers.
• Familiarity with key AI platform components such as AI gateways, model orchestration tools (LangChain, LlamaIndex, etc.).
• Understanding of AI regulatory frameworks such as NIST AI RMF, MITRE ATLAS, GDPR, and the EU AI Act.
• Information Security certifications (CISSP, SANS GIAC, CISA, etc.).

Benefits

• Generous time‑away and health benefits from day one, with flexible work options.
• 2‑for‑1 matching gifts for charitable contributions and annual grants for chosen organizations.
• On‑demand professional development resources to hone existing skills and learn new ones.

Compensation

Base salary ranges by location:
Charlotte: $194,706 – $311,530
Southern California: $226,893 – $363,029
New York: $240,519 – $384,830

In addition to a competitive base salary, eligible employees will receive an individual annual performance bonus, Capital’s annual profitability bonus, and a retirement plan with a 15% company contribution.

Equal Opportunity Employer

We are an equal‑opportunity employer and comply with all federal, state, and local laws that prohibit discrimination in all employment decisions. Our policies prohibit unlawful discrimination on the basis of race, religion, color, national origin, ancestry, sex (including gender and gender identity), pregnancy, childbirth and related medical conditions, age, physical or mental disability, medical condition, genetic information, marital status, sexual orientation, citizenship status, HIV status, political activities or affiliations, military or veteran status, and any other characteristic protected by law.