AI-Powered Application Security Engineer II

Socket.dev; United States; On-site; USD 130,000 - 187,000; Full time

Job summary

Abnormal AI in the United States is hiring an Application Security Engineer II to secure the AI-powered platform on AWS, focusing on secure development, threat modeling, and defensible architectures. You will own the security architecture and coach developers, acting as a technical liaison across teams, reporting to the Director of Security Engineering.

The role emphasizes integrating security across the software development lifecycle, building tooling, and tracking metrics to strengthen our

Qualifications

• 5+ years in application security engineering roles.
• Experience securing AI/ML-powered systems or ability to ramp on prompt injection, model supply chain, and agentic-workflow risks.
• Strong production coding skills in Python, Go, Java, or TypeScript.
• Expertise in web application security including OWASP Top 10, authentication/authorization, cryptography, and secure API design for cloud-native architectures.
• Hands-on experience threat modeling and running security architecture reviews.
• Proven ability to influence and collaborate cross-functionally with engineering, DevOps, and product teams, with strong written communication.

Responsibilities

• Lead threat modeling and security architecture reviews with engineering teams by translating security risks into concrete development actions, with particular focus on AI-powered features.
• Architect, build, and maintain security tooling and integrations that make secure development the default in our CI/CD pipelines.
• Design and deploy automated security testing to identify vulnerabilities early in the development process.
• Serve as a hands-on technical contributor during security incidents by analyzing application-level behavior and enhancing response processes.
• Coach developers on secure coding, security architecture, and threat modeling for AI-native systems.
• Define and track key security posture metrics, building dashboards or reports to visualize security coverage and vulnerability trends.

Skills

Application Security

Python/Go/Java/TypeScript

Threat Modeling

OWASP Top 10

Security Architecture Reviews

Cross-Functional Collaboration

Cloud AWS

Tools

Veracode

Checkmarx

SonarQube

Wiz

Semgrep

Burp Suite

Job description

Abnormal AI in the United States is hiring an Application Security Engineer II to secure the AI-powered platform on AWS, focusing on secure development, threat modeling, and defensible architectures. You will own the security architecture and coach developers, acting as a technical liaison across teams, reporting to the Director of Security Engineering.

The role emphasizes integrating security across the software development lifecycle, building tooling, and tracking metrics to strengthen our