Application & AI Security Engineer

Hydrogen Group; United States; On-site; USD 140,000 - 190,000; Full time

Job summary

Hydrogen Group is seeking a highly technical Application & AI Security Engineer to advance application and AI security across the software development lifecycle. You will work closely with developers, architects, cybersecurity teams, data engineers, and other technical stakeholders to build secure, resilient applications and integrate security into modern development practices.

You’ll embed security principles into design and deployment, perform security testing, and implement defensive measures

Qualifications

• Bachelor’s degree or equivalent professional experience.
• 7+ years of experience in information technology or security.
• Experience in Agile environments, including Scrum and Kanban.
• Hands-on application security testing experience, Burp Suite.
• Strong experience with SAST, SCA, and DAST.
• Experience securing AI/LLM-powered applications.
• Familiarity with OWASP Top 10 for LLM Applications and MITRE ATLAS.
• Experience working with Claude and GPT models.
• Programming/scripting with Java, Python, Bash, Perl, or PowerShell.
• Knowledge of OWASP, CVSS, MITRE ATT&CK, and SDLC.
• Foundational knowledge of infrastructure and operating systems.
• CISSP and/or GIAC GWAPT preferred.

Responsibilities

• Partner with developers and stakeholders to embed security principles into design and deployment.
• Perform application security testing and validate security controls across projects.
• Implement defensive security practices across traditional and AI-enabled apps.
• Leverage SAST, SCA, and DAST tools to identify and reduce risks.
• Conduct automated and manual code assessments and drive remediation.
• Apply threat modeling across the development lifecycle, including AI/LLM apps.
• Secure AI/ML and Generative AI applications, including LLM integration security.
• Govern the secure use of AI coding assistants in the SDLC.
• Serve as a security escalation point and collaborate on resolution efforts.
• Develop tools and services to help engineering teams adopt security capabilities.
• Champion shift-left security and integrate security earlier in the SDLC.

Skills

Agile environments

Security testing

AI/LLM security

Coding proficiency

Education

Bachelor’s degree or equivalent

Tools

Burp Suite

SAST

SCA

DAST

Claude

GPT models

MITRE ATLAS

OWASP Top 10 for LLM

Job description

I’m currently recruiting on behalf of my client for a highly technical Application & AI Security Engineer to help advance application and AI security across the software development lifecycle.

This is an exciting opportunity for a security-focused engineer who enjoys working closely with developers, architects, cybersecurity teams, data engineers, and other technical stakeholders to build secure, resilient applications and integrate security into modern development practices.

What You’ll Be Doing

• Partner with developers, architects, stakeholders, and Scrum teams to embed security principles into application design and deployment.
• Perform application security testing and validate security controls across projects.
• Implement defensive security practices and countermeasures across traditional and AI-enabled applications.
• Leverage SAST, SCA, and DAST tools and methodologies to identify and reduce application security risks.
• Conduct automated and manual code assessments and drive efficient vulnerability remediation.
• Apply threat modeling throughout the development lifecycle, including for AI/LLM applications.
• Assess and secure AI/ML and Generative AI applications, including LLM integration security, prompt injection, data leakage, and other emerging AI risks.
• Help govern the secure use of AI coding assistants throughout the software development lifecycle.
• Serve as a security escalation point and collaborate closely on resolution efforts.
• Develop tools and services that make it easier for engineering teams to adopt security capabilities.
• Champion shift-left security by integrating security earlier and throughout the SDLC.

What We’re Looking For:

• Bachelor’s degree in a related field or equivalent professional experience.
• 7+ years of experience in information technology, information security, security operations, or a related technical security discipline.
• Experience working within Agile environments, including Scrum and Kanban.
• Hands-on application security testing experience, including Burp Suite.
• Strong experience with SAST, SCA, and DAST.
• Experience securing AI/LLM-powered applications.
• Familiarity with OWASP Top 10 for LLM Applications and MITRE ATLAS.
• Experience working with Claude and GPT models.
• Understanding of securing and governing AI-assisted coding tools.
• Programming/scripting experience with Java, Python, Bash, Perl, or PowerShell.
• Knowledge of OWASP, CVSS, MITRE ATT&CK, and the SDLC.
• Foundational knowledge of infrastructure and operating systems.
• CISSP and/or GIAC Web Application Penetration Tester (GWAPT) certifications are preferred.