Application Security Engineer - Threat & Vulnerability (AI Focus)

Red Commerce Schweiz GmbH; United States; Remote; USD 120,000 - 160,000; Full time

Job summary

RED Global is seeking an experienced Application Security Engineer to embed security across the AI development lifecycle. You will collaborate with engineering, platform, and AI teams to secure AI-powered applications, LLMs, and AI agents.

You will lead threat modelling, perform vulnerability assessments, and guide remediation with development teams. This role requires hands-on tooling experience and a deep understanding of AI/LLM security threats.

Qualifications

• 5+ years' experience in Application Security, DevSecOps, Product Security or Vulnerability Management.
• Hands-on experience with application security tooling and CI/CD security controls.
• Understanding of AI/LLM threats and relevant OWASP guidance.
• Experience with cloud, container, API and software supply chain security.

Responsibilities

• Integrate SAST, DAST and SCA tooling into CI/CD pipelines.
• Lead threat modelling and vulnerability assessments for AI applications.
• Prioritise security risks and coordinate remediation with development teams.
• Establish secure development practices and AI supply chain controls.

Skills

Application Security

DevSecOps

Product Security

Vulnerability Management

SAST

DAST

SCA

CI/CD Security

Tools

CI/CD tooling

Job description

RED Global is looking for an experienced Application Security Engineer to help secure AI-powered applications, LLMs and AI agents. You will work closely with engineering, platform and AI teams to embed security throughout the development lifecycle.

Key responsibilities:

• Integrate SAST, DAST and SCA tooling into CI/CD pipelines.
• Lead threat modelling and vulnerability assessments for AI applications.
• Prioritise security risks and coordinate remediation with development teams.
• Establish secure development practices and AI supply chain controls.

What we're looking for:

• 5+ year's experience in Application Security, DevSecOps, Product Security or Vulnerability Management.
• Hands-on experience with application security tooling and CI/CD security controls.
• Understanding of AI/LLM threats and relevant OWASP guidance.
• Experience with cloud, container, API and software supply chain security.