AppSec Engineer II - AI/Cloud Security, Threat Modeling

Abnormal Security Corp.; United States; A distancia; USD 130.000 - 187.000; Jornada completa

Descripción de la vacante

Abnormal AI is seeking an Application Security Engineer II to secure our AWS-based platform with LLM-powered features, agentic workflows, MCP connectors, and the model supply chain. This role focuses on integrating security into every phase of the software development lifecycle and coaching engineers on secure coding.

You will own security architecture, run threat modeling, build security tooling for CI/CD, deploy automated tests, and partner with engineering, DevOps, and product teams.

Formación

• 5+ years in application security engineering roles in AWS or cloud-native environments.
• Experience securing AI/ML-powered systems or ramp on prompt injection and model supply chain risks.
• Strong programming in Python, Go, Java, or JavaScript/TypeScript.
• Security focus on OWASP Top 10, auth, cryptography, and secure API design in microservices/cloud-native.
• Hands-on threat modeling and security architecture reviews.
• Ability to influence across engineering, DevOps, and product with clear written communication.

Responsabilidades

• Lead threat modeling and security architecture reviews for AI-powered features.
• Architect, build, and maintain security tooling for secure CI/CD pipelines.
• Design and deploy automated security testing early in development.
• Contribute hands-on during security incidents and improve response processes.
• Coach developers on secure coding and threat modeling for AI-native systems.
• Define and track security posture metrics with dashboards and reports.

Conocimientos

Application security

AWS security

Programming (Python/Go/Java/TS)

Web app security

Threat modeling

Cross-functional collaboration

Herramientas

Veracode

Checkmarx

SonarQube

Wiz

Semgrep

Burp Suite

Descripción del empleo

Abnormal AI is seeking an Application Security Engineer II to secure our AWS-based platform with LLM-powered features, agentic workflows, MCP connectors, and the model supply chain. This role focuses on integrating security into every phase of the software development lifecycle and coaching engineers on secure coding.

You will own security architecture, run threat modeling, build security tooling for CI/CD, deploy automated tests, and partner with engineering, DevOps, and product teams.