Finance AppSec Engineer - AI Security & SDLC

MassGenics, Inc.; Charlotte (NC); Hybrid; USD 113,000 - 121,000; Full time

Benefits offered by this job

Medical & pharmacy coverage

Dental/vision insurance

401(k)

HSA & FSA

Life Insurance

Pet Insurance

Short term & Long term Disability

Accident & Critical illness coverage

Pre-paid legal & ID theft protection

Sick time

other paid leaves

Employee Assistance Program (EAP)

Job summary

Innova Solutions is hiring an Application Security Engineer for a 12-month contract in Charlotte, NC. Hybrid work with 3 days onsite and 2 remote. You will secure AI/LLM apps, integrate security into CI/CD, and mentor engineering teams while driving governance and risk tracking.

The role demands strong AppSec experience, Python automation, and expertise in secure SDLC, with hands-on work on SAST/DAST/SCA and AVR tooling. Excellent communication with cross-functional teams is essential.

Qualifications

• Experience in Application Security with enablement or Community of Practice (CoP).
• Hands-on in AI/LLM security (prompt injection, RAG, guardrails).
• Strong Python automation skills for security testing and probes.
• Expertise in secure SDLC, CI/CD security, and threat modeling.
• Experience with SAST, DAST, SCA & ServiceNow AVR.
• Mentor developers and influence engineering teams.

Responsibilities

• Champion AppSec-by-design across decentralized engineering teams.
• Secure AI/LLM applications and guard AI/LLM security risks.
• Integrate security controls into CI/CD pipelines (SAST, DAST, SCA).
• Operationalize AI adversarial testing and define test suites.
• Build security KPIs, dashboards & compliance tracking.
• Enable teams via training, playbooks, threat modeling & workshops.
• Bridge Security & Engineering; drive governance and standards.

Skills

AppSec experience

AI/LLM security

Python automation

Secure SDLC & CI/CD

SAST/DAST/SCA & AVR

Mentor engineers

Tools

ServiceNow AVR

Job description

Innova Solutions is hiring an Application Security Engineer for a 12-month contract in Charlotte, NC. Hybrid work with 3 days onsite and 2 remote. You will secure AI/LLM apps, integrate security into CI/CD, and mentor engineering teams while driving governance and risk tracking.

The role demands strong AppSec experience, Python automation, and expertise in secure SDLC, with hands-on work on SAST/DAST/SCA and AVR tooling. Excellent communication with cross-functional teams is essential.