AI Security Engineer / Application Security Engineer

Cybersecurity Jobs; Sunnyvale, Seattle (CA, WA); On-site; USD 62,000 - 69,000; Full time

Job summary

Compest Solutions Inc is seeking an AI Security / Application Security Engineer for an onsite contract focused on securing applications, APIs, cloud services, and AI integrations. You will conduct security reviews, analyze architectures, model threats, and perform hands-on testing of AI agents to uncover vulnerabilities and provide remediation guidance.

The role requires 8+ years in security engineering or related fields, strong knowledge of threat modeling and data protection, and hands-on

Qualifications

• 8+ years of professional experience in security engineering, application security, product security, offensive security, systems architecture, or a related security field.
• Experience reviewing complex technical designs and identifying security risks in applications, APIs, cloud services, microservices, distributed systems.
• Strong understanding of threat modeling.
• Strong understanding of vulnerability assessment.
• Strong understanding of risk modeling.
• Strong understanding of authentication and authorization.
• Strong understanding of least-privilege principles.
• Strong understanding of data protection.
• Strong understanding of security architecture.
• Hands-on security testing, vulnerability investigation, penetration testing, adversarial testing, or security-control validation.
• Strong technical communication skills for explaining security findings to engineering and business stakeholders.

Responsibilities

• Conduct security and privacy design reviews for applications, APIs, cloud services, engineering proposals, and AI integrations.
• Review system architecture and data flows, including access controls, trust boundaries, authentication, authorization, and security safeguards.
• Perform threat modeling for critical services and AI agents, documenting attack surfaces, attack scenarios, attack paths, mitigations, and residual risks.
• Execute hands-on security testing and adversarial testing of AI/LLM agents, covering prompt injection, tool misuse, unsafe external integrations, excessive agency, unauthorized data access, permissions and access-control issues, and sensitive-data exposure.
• Identify, validate, and document security vulnerabilities, providing practical remediation recommendations.
• Partner with engineering, security, privacy, and third-party teams to drive fixes and validate implemented security controls.
• Create reusable security assessment assets including methodologies, checklists, threat models, test cases, and reporting templates.
• Support security automation and AI-assisted security workflows when applicable.

Skills

Security engineering

Application security

Threat modeling

Vulnerability assessment

Risk modeling

Authentication & authorization

Least-privilege

Data protection

Security architecture

Security testing

Technical communication

AI/LLM security

Tools

Python

Go

Bash

Job description

Compest Solutions Inc is hiring an AI Security / Application Security Engineer for an onsite contract focused on application, API, cloud, and AI/LLM integration security.

Responsibilities

• Conduct security and privacy design reviews for applications, APIs, cloud services, engineering proposals, and AI integrations.
• Review system architecture and data flows, including access controls, trust boundaries, authentication, authorization, and security safeguards.
• Perform threat modeling for critical services and AI agents, documenting attack surfaces, attack scenarios, attack paths, mitigations, and residual risks.
• Execute hands‑on security testing and adversarial testing of AI/LLM agents, covering:
  • Prompt injection
  • Tool misuse and unsafe external integrations
  • Excessive agency
  • Unauthorized data access
  • Permission and access‑control issues
  • Sensitive‑data exposure
• Identify, validate, and document security vulnerabilities, providing practical remediation recommendations.
• Partner with engineering, security, privacy, and third‑party teams to drive fixes and validate implemented security controls.
• Create reusable security assessment assets including methodologies, checklists, threat models, test cases, and reporting templates.
• Support security automation and AI‑assisted security workflows when applicable.

Requirements

• 8+ years of professional experience in security engineering, application security, product security, offensive security, systems architecture, or a related technical security field.
• Experience reviewing complex technical designs and identifying security risks in:
  • Applications
  • APIs
  • Cloud services
  • Microservices
  • Distributed systems
• Strong understanding of threat modeling.
• Strong understanding of vulnerability assessment.
• Strong understanding of risk modeling.
• Strong understanding of authentication and authorization.
• Strong understanding of least‑privilege principles.
• Strong understanding of data protection.
• Strong understanding of security architecture.
• Hands‑on experience with security testing, vulnerability investigation, penetration testing, adversarial testing, or security‑control validation.
• Strong technical communication skills for explaining security findings to engineering and business stakeholders.

Technologies

• Python
• Go
• Bash

Location

• Onsite in Seattle, Washington and Sunnyvale, California.
• Local candidates required.

Position Type

• Contract
• In person work location

Visa

• Any Visa Will work

Pay

• Pay rate: $45.00 - $50.00 per hour
• Salary basis: W2 pay rate

Preferred Qualifications

• Experience assessing AI/LLM applications and autonomous AI agents.
• Knowledge of prompt injection, jailbreaks, unsafe tool use, excessive agency, and AI data‑security risks.
• Experience with privacy and security design reviews.
• Experience securing cloud environments.
• Security automation experience using Python, Go, Bash, or similar languages.
• Familiarity with application‑security frameworks and industry security practices.

Key Skills

• Application Security
• AI/LLM Security
• Threat Modeling
• Penetration Testing
• Adversarial Testing
• Cloud Security
• API Security
• Security Architecture
• Vulnerability Assessment
• Privacy & Data Protection
• Python/Go/Bash
• Security Automation