AI AppSec Lead: Secure AI SDLC & Incident Response

Capital Group; New York (NY); On-site; USD 240,519 - 384,830; Full time

Benefits offered by this job

Generous time-off

Health benefits

2-for-1 gifts

Professional development

Job summary

Capital Group seeks an experienced security professional to lead the protection of custom and procure AI solutions across our enterprise platforms in New York. You will embed secure practices into the AI development lifecycle and promote AI security principles organization-wide.

You will collaborate with platform, security, and risk engineering teams to embed automated checks into the AI SDLC, perform threat modeling, review code for AI vulnerabilities, and shape incident response playbooks for

Qualifications

• 8+ years in information security, app security, or related fields.
• Expertise in AI safety risks and OWASP LLM Top 10.
• 5+ years automating security checks into CI/CD pipelines.
• Experience with STRIDE and agile workflows.
• Proficiency in Python, Java, or .NET.

Responsibilities

• Embed automated security checks into AI SDLC/ML‑Ops.
• Threat model AI systems and define security requirements.
• Review AI code for security vulnerabilities.
• Lead AI security policy alignment with Risk/Tech teams.
• Develop incident playbooks for AI security incidents.

Skills

Information security

Threat modeling

CI/CD security

Programming languages

Leadership

Communication

Tools

SAST

SCA

DAST

Threat modeling frameworks

Job description

Capital Group seeks an experienced security professional to lead the protection of custom and procure AI solutions across our enterprise platforms in New York. You will embed secure practices into the AI development lifecycle and promote AI security principles organization-wide.

You will collaborate with platform, security, and risk engineering teams to embed automated checks into the AI SDLC, perform threat modeling, review code for AI vulnerabilities, and shape incident response playbooks for