AI Security Engineer II — Threat Modeling & Secure AI CI/CD

Rootedsec; Northern (KY); Hybrid; USD 130,000 - 187,000; Full time

Job summary

Rootedsec is seeking an experienced Application Security Engineer II to lead threat modeling for AI-powered features and strengthen security across AI-native systems. You will build tooling, integrate with CI/CD, and design automated security tests while coaching developers on secure coding practices.

The role requires strong Python/Go/JS/TS skills and hands-on security expertise, with remote work available within the United States.

Qualifications

• 5+ years in application security engineering.
• Experience securing AI/ML systems or ability to learn prompt-injection and agentic risks quickly.
• Strong programming in Python, Go, Java or JS/TS.
• Web security: OWASP Top 10, authentication, cryptography, secure API design.
• Hands-on threat modeling and architecture review.

Responsibilities

• Lead threat modeling and architecture reviews for AI features.
• Build security tooling and CI/CD integrations.
• Design automated security testing.
• Support incident response analysis.
• Coach developers on secure coding.

Skills

Threat modeling

Security tooling

CI/CD integrations

Secure coding

Programming: Python

Programming: Go

Programming: JavaScript/TypeScript

Web security: OWASP Top 10

AI/ML security concepts

Incident analysis

Tools

Veracode

Checkmarx

SonarQube

Job description

Rootedsec is seeking an experienced Application Security Engineer II to lead threat modeling for AI-powered features and strengthen security across AI-native systems. You will build tooling, integrate with CI/CD, and design automated security tests while coaching developers on secure coding practices.

The role requires strong Python/Go/JS/TS skills and hands-on security expertise, with remote work available within the United States.