APPLICATION SECURITY ENGINEER

SIDRAM TECHNOLOGIES; New York (NY); Hybrid; USD 180,000 - 260,000; Full time

Job summary

Altimetrik / S&P Global is seeking a Senior Application Security Engineer to lead secure software development, focusing on AI/ML, LLM systems, and robust API security. This full-time role is hybrid with locations in Princeton, NJ and NYC, NY, and requires 15+ years of hands-on engineering and security experience and a track record of shipping production code.

You will apply secure SDLC practices, perform threat modeling, and assess AI supply-chain risks, with emphasis on Claude Code integrations

Qualifications

• 15+ years of experience in Software Engineering and Application Security.
• Strong hands-on Python development and automation.
• Experience with AI/ML and LLM technologies.
• Familiarity with Claude Code and its extensions.
• Understanding of AI Agents / Agentic Frameworks.
• Knowledge of OWASP Top 10, prompt injection, and AI supply-chain risks.
• Experience with Secure SDLC and Threat Modeling.
• Strong API Security, Authentication & Authorization.
• Hands-on production code shipping experience.
• Judgment to automate, escalate, or resolve security issues.

Skills

Software Engineering

Application Security

Python development

AI/ML & LLM

Claude Code

Agentic AI

OWASP Top 10

Secure SDLC

Threat Modeling

API Security

Production code

Automation

Tools

Claude Code

Job description

NOW HIRING: SENIOR APPLICATION SECURITY ENGINEER

Client: Altimetrik / S&P Global

Location: Princeton, NJ & NYC, NY HYBRID

Employment Type: FULL-TIME

Experience: 15+ Years Required

Must Have

• 15+ years of experience in Software Engineering & Application Security
• Strong hands-on Python development and automation
• Strong experience with AI/ML & LLM technologies
• Proficiency with Claude Code and its extensibility: Skills, Subagents, Hooks, Slash Commands & MCP integrations
• Understanding of AI Agents / Agentic Frameworks
• Knowledge of OWASP LLM Top 10, prompt injection, agent tool permissions, and AI supply-chain risks
• Strong Secure SDLC, Threat Modeling & OWASP Top 10
• Strong API Security, Authentication & Authorization
• Hands-on software development experience must have shipped production code
• Strong judgment in identifying when to automate, elevate, or resolve security issues directly

Nice To Have

• Experience securing production LLM / Agentic AI systems
• Experience building AI security tooling
• Open-source security contributions
• OSCP / GWAPT / CSSLP certifications