GenAI App Security Engineer (Remote)

Liftoff; Idaho Falls (ID); Remote; USD 184,000 - 250,000; Full time

Benefits offered by this job

Medical coverage

Wellness stipends

Equity and benefits

Job summary

Liftoff is an AI-powered performance marketing platform for the mobile app economy, offering broad security-minded opportunities across GenAI and cloud infrastructure. This individual contributor role focuses on application security, with contributions to cloud and infrastructure security, incident response, and on-call rotations.

The position supports remote work within listed US entities and Canada. Join Liftoff to design secure software, perform threat modeling, and build automation that

Qualifications

• 5+ years of relevant experience in security engineering or software engineering.
• Excellent judgment in prioritizing security efforts using a risk-based approach.
• Experience partnering with cross-functional teams to deliver security improvements and help engineers choose practical fixes.
• Write production-quality code for security tools and automation, review pull requests, and navigate large, unfamiliar codebases.
• Strong understanding of secure software design, application and API security, authentication and authorization, threat modeling, and code review.
• Experience assessing cloud and infrastructure security and contributing beyond a primary application-security specialty.
• Practical software engineering habits: testing, observability, version control, peer code review, continuous integration, and blameless postmortems.
• Strong technical writing: design documents, proposals, runbooks, and post-incident reviews that support engineering decisions. Explain security risks and tradeoffs clearly in writing and conversation.
• Experience with Go, Python, Clojure, or JavaScript; ability to work across languages matters more than a specific language.
• Experience securing GenAI applications, designing sandboxes, or evaluating AI-assisted security tools and their output.
• Experience scaling cloud security or working with high-velocity software engineering teams, mobile advertising, or other high-volume SaaS environments.

Responsibilities

• Establish secure software development standards and integrate security into engineering design and development.
• Create self-service paths for engineering teams to build and deploy securely through documented review workflows, reusable tools, and secure design patterns.
• Perform design and code reviews, threat modeling, and security assessments for GenAI, Creative GenAI, and emerging businesses, including sandbox design and isolation.
• Triage incoming security issues, prioritize vulnerabilities by risk, and work with engineering teams through timely remediation and verification.
• Assess vendors and AI tools to ensure their security controls and product features support secure employee use.
• Share the security team's on-call and incident-response rotation, including occasional off-hours response.
• Conduct blameless post-incident reviews, document findings, and follow through on remediation.
• Build maintainable security tools and automation, including an AI-assisted code-security triage pilot that produces actionable findings at a false-positive rate engineering will accept.
• Partner with Detection & Response to turn application-security findings and threat models into detection improvements and response guidance.
• Contribute across application, cloud, and infrastructure security as priorities change, including Accelerate and MX.
• Engage in various domains including product security, vendor security, corporate security, and infrastructure security.

Skills

Application security

Threat modeling

Code review

Security automation

Cross-functional collaboration

Go

Python

Clojure

JavaScript

Cloud security

Incident response

Tools

Git

Job description

Liftoff is an AI-powered performance marketing platform for the mobile app economy, offering broad security-minded opportunities across GenAI and cloud infrastructure. This individual contributor role focuses on application security, with contributions to cloud and infrastructure security, incident response, and on-call rotations.

The position supports remote work within listed US entities and Canada. Join Liftoff to design secure software, perform threat modeling, and build automation that