Application Security Engineer: Threat Modeling & AI

Zoolatech; United States; Remote; USD 124,000 - 207,000; Part time

Job summary

Zoolatech is seeking an experienced Application Security Engineer to join a collaboration with a leading European fashion and beauty retailer. You will focus on threat modeling, security architecture, and design reviews to help engineers build secure, cloud-native applications.

You will validate AI-assisted threat modeling results, advise on secure patterns, review authentication and API security, and promote OWASP practices across teams.

Qualifications

• 5–10 years of professional experience in Application Security.
• Hands-on threat modeling experience using STRIDE.
• Experience reviewing AI-assisted threat modeling outputs.
• App security architecture and technical design review experience.
• Strong knowledge of OWASP Top 10 for Web Applications and REST API security.
• Experience with OAuth2.0/2.1, OpenID Connect, JWT/JWS/JWE, mTLS, and SAML.
• Understanding RBAC/ABAC and policy-as-code approaches (OPA, Rego, Cedar).
• Familiarity with cloud-native architectures and backend technologies.
• Ability to communicate security risks clearly to engineers and architects.

Responsibilities

• Conduct structured threat modeling for web applications using STRIDE.
• Review and validate AI-assisted threat modeling outputs, identifying gaps.
• Perform application security architecture and technical design reviews early in SDLC.
• Recommend secure design patterns and practical mitigations for security risks.
• Review authentication/authorization, API security, tokens, and secrets handling.
• Collaborate with engineers and architects to embed security best practices.
• Provide clear, developer-friendly guidance on implementing controls and remediations.
• Assess security risks in AI/LLM-based apps and architectures with practical recommendations.
• Apply OWASP Top 10 standards for Web Apps and REST APIs.

Job description

Zoolatech is seeking an experienced Application Security Engineer to join a collaboration with a leading European fashion and beauty retailer. You will focus on threat modeling, security architecture, and design reviews to help engineers build secure, cloud-native applications.

You will validate AI-assisted threat modeling results, advise on secure patterns, review authentication and API security, and promote OWASP practices across teams.