AI Security Engineer - Cloud & Threat Modeling (Remote)

CINC Systems; United States; On-site; USD 120,000 - 190,000; Full time

Job summary

CINC Systems is seeking a highly technical Security Engineer to review architecture, test applications, and secure AWS infrastructure while integrating AI security into products. You will partner with engineering teams to identify abuse paths across applications, APIs, and CI/CD pipelines.

The ideal candidate will have hands-on experience with SAST/DAST/SCA, red teaming, SIEM-driven detection, and IaC security, and can automate security workflows across complex cloud-native environments.

Qualifications

• Hands-on application security, AWS security, or security engineering experience.
• Embedded security into secure SDLC and engineering workflows.
• Experience with SAST, DAST, SCA, and manual testing.
• Deep knowledge of OWASP Top 10 and API security concepts.
• Experience testing web apps, APIs, microservices, and cloud services.

Responsibilities

• Lead security reviews for web apps, APIs, and AI-enabled products.
• Perform SAST/DAST/ SCA and manual code reviews.
• Identify vulnerabilities in authentication/authorization and API design.
• Conduct threat modeling for new products and AWS architectures.
• Improve secure SDLC processes and CI/CD security gates.
• Review IaC templates (Terraform, CloudFormation, CDK) for misconfigurations.
• Assess AWS environments for IAM weaknesses and data exposure.
• Run red team exercises and adversary simulations.
• Develop proofs-of-concept and automation to reproduce issues.
• Mentor engineers on secure coding and AI security risks.

Skills

Application security

AWS security

Offensive security

Secure SDLC

Threat modeling

AI security

SAST

DAST

SCA

Red teaming

SIEM

Infrastructure-as-code security

Python scripting

RBAC

CI/CD security

Container/Kubernetes security

Threat hunting

Education

Bachelor's degree in a related field

Tools

Terraform

CloudFormation

AWS CDK

Kubernetes YAML

Helm

Dockerfiles

Snyk/Trivy etc.

Job description

CINC Systems is seeking a highly technical Security Engineer to review architecture, test applications, and secure AWS infrastructure while integrating AI security into products. You will partner with engineering teams to identify abuse paths across applications, APIs, and CI/CD pipelines.

The ideal candidate will have hands-on experience with SAST/DAST/SCA, red teaming, SIEM-driven detection, and IaC security, and can automate security workflows across complex cloud-native environments.