AI Security Engineer: Threat Modeling & Testing

ERPMARK INC; Seattle (WA); In loco; USD 120.000 - 180.000; Tempo pieno

Descrizione del lavoro

ERPMARK INC. seeks an experienced Security Engineer to support Engineering Security initiatives—focusing on security reviews, threat modeling, and third-party AI agent security testing.

You will work with Engineering, Security, and Privacy teams to identify risks, perform hands-on assessments, and provide remediation guidance. Ideal candidates have 3+ years in security engineering or related fields, with hands-on testing, strong threat modeling knowledge, and excellent communication skills to

Competenze

• 3+ years of professional experience in security engineering or related fields.
• Experience reviewing complex designs and identifying security risks across applications, APIs, cloud services, microservices, or distributed systems.
• Strong knowledge of threat modeling, vulnerability classification, least privilege, and data protection.
• Hands-on security testing, vulnerability investigation, penetration testing, or security-control validation.
• Strong communication skills to explain findings to diverse stakeholders.

Mansioni

• Conduct security and privacy design reviews of services, applications, APIs, engineering proposals, and AI integrations.
• Evaluate architecture, data flows, access controls, trust boundaries, and security safeguards.
• Perform threat modeling for critical services and AI agents, identifying attack surfaces, scenarios, paths, mitigations, and residual risks.
• Conduct hands-on security testing of third-party AI agents including data access/permissions, excessive agency, and external integrations.
• Document findings, risk assessments, evidence, and remediation recommendations; partner with engineering teams through remediation and validation.
• Develop repeatable security assessment processes, including checklists, threat models, test cases, reporting templates, and automation workflows.

Conoscenze

Security Engineering

Threat Modeling

Vulnerability Classification

Least Privilege

Data Protection

Communication Skills

Strumenti

Python

Go

Bash

Descrizione del lavoro

ERPMARK INC. seeks an experienced Security Engineer to support Engineering Security initiatives—focusing on security reviews, threat modeling, and third-party AI agent security testing.

You will work with Engineering, Security, and Privacy teams to identify risks, perform hands-on assessments, and provide remediation guidance. Ideal candidates have 3+ years in security engineering or related fields, with hands-on testing, strong threat modeling knowledge, and excellent communication skills to