Application Security Engineer II — AI & Cloud Security

Abnormalsecurity; United States; On-site; USD 130,000 - 187,000; Full time

Benefits offered by this job

Bonus potential

Equity

Benefits package

Job summary

Abnormal AI is seeking an Application Security Engineer II to secure our AI-powered AWS-based platform. You will own security architecture, drive secure coding practices, and coach engineers on application security principles.

This role reports to the Director of Security Engineering and focuses on integrating security into every phase of the SDLC. You will lead threat modeling, build security tooling for CI/CD, and design automated security testing.

Qualifications

• 5+ years in application security engineering, ideally in cloud-native environments.
• Experience securing AI/ML-powered systems or ramping on prompt injection and model supply chain risks.
• Strong programming skills in Python, Go, Java, or JavaScript/TypeScript; production code experience.
• Expertise in web application security, authentication/authorization, cryptography, and secure API design.
• Hands-on threat modeling and security architecture reviews.
• Ability to influence cross-functional teams with clear written communication.

Responsibilities

• Lead threat modeling and security architecture reviews with engineering teams for AI-powered features.
• Architect, build, and maintain security tooling integrated into CI/CD pipelines.
• Design and deploy automated security testing to identify vulnerabilities early.
• Contribute hands-on during security incidents by analyzing behavior and improving response.
• Coach developers on secure coding, security architecture, and threat modeling.
• Define and track security posture metrics with dashboards and reports.

Skills

Python

Go

Java

JavaScript/TypeScript

Threat modeling

Web security

OWASP Top 10

Security architecture

Cloud security AWS

Communication

Tools

Veracode

Checkmarx

SonarQube

Wiz

Semgrep

Burp Suite

Job description

Abnormal AI is seeking an Application Security Engineer II to secure our AI-powered AWS-based platform. You will own security architecture, drive secure coding practices, and coach engineers on application security principles.

This role reports to the Director of Security Engineering and focuses on integrating security into every phase of the SDLC. You will lead threat modeling, build security tooling for CI/CD, and design automated security testing.