Application Security Engineer II for AI-Powered Cloud Platform

Abnormal; United States; On-site; USD 130,000 - 187,000; Full time

Job summary

Abnormal AI is seeking an Application Security Engineer II to secure our AWS-based platform with AI-powered features, agentic workflows, MCP connectors, and the model supply chain. This role blends deep security expertise with strong engineering fundamentals, focusing on integrating security into the SDLC and conducting comprehensive security reviews.

You will own security architecture, coach developers on secure coding, and collaborate across teams, reporting to the Director of Security

Qualifications

• 5+ years of application security engineering experience (AWS/cloud-native).
• Experience securing AI/ML-powered systems or ramping on prompt-injection and model supply chain risks.
• Strong programming skills in Python, Go, Java, or JavaScript/TypeScript.
• Web application security expertise including OWASP Top 10, auth, cryptography, API security, microservices and containers.
• Hands-on threat modeling and security-architecture review experience.
• Ability to influence and collaborate across engineering, DevOps, and product teams with strong written communication.

Responsibilities

• Lead threat modeling and security architecture reviews for AI-powered features.
• Architect, build, and maintain security tooling integrated into CI/CD pipelines.
• Design and deploy automated security testing to identify vulnerabilities early.
• Contribute hands-on during security incidents and improve response processes.
• Coach developers on secure coding and threat modeling for AI-native systems.
• Define and track security posture metrics with dashboards and reports.

Skills

5+ years security experience

AWS security

Python

Go

Java

JavaScript/TypeScript

OWASP Top 10

Threat modeling

Cross-functional collaboration

Tools

Veracode

Burp Suite

SonarQube

Semgrep

Job description

Abnormal AI is seeking an Application Security Engineer II to secure our AWS-based platform with AI-powered features, agentic workflows, MCP connectors, and the model supply chain. This role blends deep security expertise with strong engineering fundamentals, focusing on integrating security into the SDLC and conducting comprehensive security reviews.

You will own security architecture, coach developers on secure coding, and collaborate across teams, reporting to the Director of Security