Application Security Specialist (AI)

Averity; New York (NY); On-site; USD 120,000 - 160,000; Full time

Benefits offered by this job

Health insurance

Job summary

Averity is seeking an AI (AppSec) Security Engineer to own and grow its AI security program. The role focuses on hands-on security engineering to defend AI deployments while enabling rapid adoption, with a strong emphasis on practical controls and collaboration across teams.

The ideal candidate brings 2+ years in application security, a solid understanding of AI/LLM architectures and security risks, and the ability to translate governance standards into actionable engineering controls.

Qualifications

• Strong application, product, or cloud security engineering experience.
• Solid understanding of modern AI/LLM architectures and their security risks.
• Experience with threat modeling, penetration testing, IAM, data protection, APIs, and secure system design.
• Ability to work hands-on while helping define a new security discipline.
• Strong communication skills and the judgment to balance innovation with risk.

Responsibilities

• Evaluating AI models, agents, platforms, plugins, and integrations before adoption
• Testing for prompt injection, data leakage, insecure connectors, excessive permissions, and other AI-specific vulnerabilities
• Designing security controls for internally developed AI applications
• Performing threat modeling, offensive testing, and security reviews
• Building monitoring and detection capabilities for AI-enabled threats
• Translating AI governance standards into controls that engineers can actually implement
• Partnering with engineering, security, privacy, legal, and business teams

Skills

Application security

Cloud security

Threat modeling

Penetration testing

IAM

Data protection

APIs

Security design

Job description

We are working with a rapidly growing, technology-driven organization seeking an AI (AppSec) Security Engineer to take ownership of its emerging AI security program.

This is not a traditional compliance position. The company needs a hands-on security engineer who can think like an attacker, build practical defenses, and help teams adopt AI without creating unacceptable security or data risks. This is a role that does not require AI AppSec experience in production, but a keen interest in growing into AI AppSec for someone with 2+ years of experience doing Application Security!

You’ll be responsible for:

• Evaluating AI models, agents, platforms, plugins, and integrations before adoption
• Testing for prompt injection, data leakage, insecure connectors, excessive permissions, and other AI-specific vulnerabilities
• Designing security controls for internally developed AI applications
• Performing threat modeling, offensive testing, and security reviews
• Building monitoring and detection capabilities for AI-enabled threats
• Translating AI governance standards into controls that engineers can actually implement
• Partnering with engineering, security, privacy, legal, and business teams

The ideal candidate will bring:

• Strong application, product, or cloud security engineering experience
• A solid understanding of modern AI/LLM architectures and their security risks
• Experience with threat modeling, penetration testing, IAM, data protection, APIs, and secure system design
• The ability to work hands-on while helping define a new security discipline
• Strong communication skills and the judgment to balance innovation with risk

This is a high-visibility opportunity for someone who wants to build an AI security capability from the ground up—not simply inherit an established program.

The company is moving aggressively into AI and needs someone capable of helping it do so safely, practically, and at scale.