Application Security Engineer - Threat & Vulnerability (AI Focus)

more-jobs; United States; Hybrid; USD 120,000 - 180,000; Full time

Job summary

RED Global is seeking an experienced Application Security Engineer to embed security across AI-powered applications, LLMs and AI agents. You will collaborate with engineering, platform and AI teams to integrate security throughout the development lifecycle and implement secure development practices.

Key responsibilities include integrating SAST, DAST and SCA into CI/CD, leading threat modelling and vulnerability assessments for AI applications, and coordinating remediation with development teams

Qualifications

• 5+ years in Application Security or related fields.
• Hands-on experience with application security tooling and CI/CD security controls.
• Understanding of AI/LLM threats and OWASP guidance.
• Experience with cloud, container, API and software supply chain security.

Responsibilities

• Integrate SAST, DAST and SCA tooling into CI/CD pipelines.
• Lead threat modelling and vulnerability assessments for AI applications.
• Prioritise security risks and coordinate remediation with development teams.
• Establish secure development practices and AI supply chain controls.

Skills

SAST

DAST

SCA

Threat modelling

Vulnerability assessments

AI/LLM security

Cloud security

Container security

APIs security

OWASP guidance

Job description

RED Global is looking for an experienced Application Security Engineer to help secure AI-powered applications, LLMs and AI agents. You will work closely with engineering, platform and AI teams to embed security throughout the development lifecycle.

Key responsibilities

• Integrate SAST, DAST and SCA tooling into CI/CD pipelines.
• Lead threat modelling and vulnerability assessments for AI applications.
• Prioritise security risks and coordinate remediation with development teams.
• Establish secure development practices and AI supply chain controls.

What we're looking for

• 5+ year's experience in Application Security, DevSecOps, Product Security or Vulnerability Management.
• Hands-on experience with application security tooling and CI/CD security controls.
• Understanding of AI/LLM threats and relevant OWASP guidance.
• Experience with cloud, container, API and software supply chain security.