Application Security Engineer II

Rootedsec; Northern (KY); Hybrid; USD 130,000 - 187,000; Full time

Job summary

Rootedsec is seeking an experienced Application Security Engineer II to lead threat modeling for AI-powered features and strengthen security across AI-native systems. You will build tooling, integrate with CI/CD, and design automated security tests while coaching developers on secure coding practices.

The role requires strong Python/Go/JS/TS skills and hands-on security expertise, with remote work available within the United States.

Qualifications

• 5+ years in application security engineering.
• Experience securing AI/ML systems or ability to learn prompt-injection and agentic risks quickly.
• Strong programming in Python, Go, Java or JS/TS.
• Web security: OWASP Top 10, authentication, cryptography, secure API design.
• Hands-on threat modeling and architecture review.

Responsibilities

• Lead threat modeling and architecture reviews for AI features.
• Build security tooling and CI/CD integrations.
• Design automated security testing.
• Support incident response analysis.
• Coach developers on secure coding.

Skills

Threat modeling

Security tooling

CI/CD integrations

Secure coding

Programming: Python

Programming: Go

Programming: JavaScript/TypeScript

Web security: OWASP Top 10

AI/ML security concepts

Incident analysis

Tools

Veracode

Checkmarx

SonarQube

Job description

# Application Security Engineer IIRemote, United States· REMOTEPro Hacker+ signal## Abnormal AIRemote US AppSec engineer focused on threat modeling and securing AI-powered product features.Type: FULLTIMERange: USD 130,100–187,000 base per yearMode: REMOTEMinimum rank: Pro Hacker## About the roleThe engineer leads threat modeling and architecture reviews for AI-powered features and builds security tooling and CI/CD integrations. The role also designs automated security testing, supports incident analysis and coaches developers on secure coding for AI-native systems.### What you will do* Lead threat modeling and architecture reviews for AI features* Build security tooling and CI/CD integrations* Design automated security testing* Support incident response analysis* Coach developers on secure coding### What they ask for* 5+ years in application security engineering* Experience securing AI/ML systems or ability to learn prompt-injection and agentic risks quickly* Strong programming in Python, Go, Java or JS/TS* Web security: OWASP Top 10, authentication, cryptography, secure API design* Hands-on threat modeling and architecture review* Remote within the US### Nice to have* Startup experience* Commercial AppSec tools (Veracode, Checkmarx, SonarQube)* Vulnerability management or security telemetry* SOC 2 / ISO 27001* Bug bounty program exposure