Application Security Engineer - AI/ML & LLM Security

SIDRAM TECHNOLOGIES; New Jersey; Hybrid; USD 180,000 - 240,000; Full time

Job summary

Altimetrik / S&P Global is seeking a Senior Application Security Engineer with a strong software engineering background and hands-on Python automation, AI/ML/LLM, and AI agent security. The role emphasizes building and shipping production security tooling, automating workflows, and addressing new security risks from AI/LLM applications.

The ideal candidate will have 12+ years of experience in software engineering and security, with demonstrated hands-on capabilities rather than governance roles,

Qualifications

• 12+ years of professional experience in Software Engineering and Application Security with hands-on development.
• Strong hands-on Python development and automation for security tools, workflows, scripts, and reusable frameworks.
• Deep experience in Application Security / Product Security / Software Security Engineering.
• Experience with Claude Code and its extensibility features (Skills, Subagents, Hooks, Slash commands, MCP integrations).
• Experience using Claude Code or similar AI coding/agent platforms to build reusable security workflows and automation.
• Solid understanding of AI/ML, LLMs, Generative AI, and AI agents.

Responsibilities

• Develop and automate security workflows and tooling for production systems.
• Secure SDLC governance, threat modeling, security architecture, and vulnerability management.
• Work with AI/LLM security concepts including prompt handling and risk assessment.
• Build and integrate security tooling with AI agents and MCP-related components.

Skills

Python programming

Automation scripting

AI/ML/LLM knowledge

Application security engineering

Secure SDLC

Threat modeling

Vulnerability management

Tools

Claude Code

MCP integrations

AI agent platforms

Job description

HIRING: Senior Application Security Engineer AI/ML & LLM Security

Location: Princeton, NJ / New York City, NY Hybrid

Client: Altimetrik / S&P Global

Employment: Full-Time

Experience: 12+ Years Required

Work Authorization: USC / H-4 EAD Only

We are looking for a Senior Application Security Engineer with a strong software engineering background and hands-on experience in Python automation, AI/ML, LLMs, AI agents, and application security. The ideal candidate is not security-adjacent you have built and shipped production code, developed security tooling, automated security workflows, and understand how modern AI/LLM applications introduce new security risks.

Required Experience

12+ years of overall professional experience in Software Engineering and Application Security, with substantial hands-on development experience.

Strong hands-on Python development and automation experience for building security tools, workflows, scripts, and reusable frameworks.

Strong experience with Application Security / Product Security / Software Security Engineering.

Hands-on experience with Claude Code, including its extensibility capabilities such as:

• Skills
• Subagents
• Hooks
• Slash commands
• MCP integrations

Experience using Claude Code or comparable AI coding/agent platforms to develop reusable security workflows and automation.

Strong understanding of AI/ML, LLMs, Generative AI, and AI agents.

Working knowledge of agentic frameworks and architectures and emerging security risks associated with AI agents.

Understanding of OWASP LLM Top 10, including prompt injection, insecure output handling, model-related risks, and sensitive information disclosure.

Understanding of AI agent security, including tool permissions, excessive agency, agent-to-agent interactions, prompt injection, and authorization boundaries.

Understanding of AI/LLM supply-chain security, including model, library, dependency, tool, and MCP-related risks.

Strong experience with Secure SDLC, threat modeling, security architecture, vulnerability management, and application security testing.

Strong Knowledge Of Common Vulnerability Classes, Including

• OWASP Top 10
• API Security
• Authentication & Authorization
• Injection
• SSRF
• XSS
• Access Control
• Dependency/Supply Chain Vulnerabilities

Ability to determine what should be automated, what requires escalation, and what can be directly remediated.

Nice to Have

Experience securing production LLM, GenAI, or agentic applications.

Experience building internal AI/LLM security tooling or security automation platforms.

Experience with MCP security and AI agent tool integrations.

Experience with AI/ML security frameworks and emerging AI security best practices.

Contributions to open-source security tools or projects.

Relevant certifications such as OSCP, GWAPT, CSSLP, or equivalent preferred but not required.

Ideal Candidate Profile

We Are Specifically Looking For Someone Who Combines

Software Engineering + Application Security + Python Automation + AI/ML/LLM + AI Agent Security. Candidates should have 12+ years of overall experience and demonstrate strong hands-on engineering capabilities rather than purely governance, compliance, audit, or security-management experience.

Please Include The Following Information With Your Resume

• Updated Resume
• Total Years of Experience
• Relevant Application Security Experience
• AI/ML/LLM Experience
• Python Automation Experience
• Claude Code / AI Agent / MCP Experience
• Current Location
• Work Authorization
• Availability / Notice Period
• Phone Number
• Email Address
• LinkedIn Profile

Please share only candidates who closely match the hands-on software engineering, application security, Python automation, and AI/LLM requirements.