GenAI Application Security Engineer

Liftoff Mobile; United States; Remote; USD 184,000 - 220,000; Full time

Benefits offered by this job

Medical coverage

Wellness stipends

Country-specific perks

Job summary

Liftoff, a leading AI-powered performance marketing platform for mobile apps, is seeking a Security Engineer to own application security for GenAI and related initiatives. You will partner with engineering to embed secure design, perform threat modeling, and lead code reviews across cloud and on-prem components.

You will build secure tooling, drive incident response readiness, and contribute to security across product, infrastructure, and vendor risk. Remote-first with US-based teams.

Qualifications

• 5+ years of experience in security or software engineering.
• Excellent judgment in prioritizing security efforts using a risk-based approach.
• Experience partnering with cross-functional teams to deliver security improvements and help engineers choose practical fixes.
• Write production-quality code for security tools and automation, review pull requests, and navigate large, unfamiliar codebases.
• Strong understanding of secure software design, application and API security, authentication and authorization, threat modeling, and code review.
• Experience assessing cloud and infrastructure security and contributing beyond a primary application-security specialty.
• Ability to quickly understand complex engineering systems and architecture.
• Practical software engineering habits: testing, observability, version control, peer code review, continuous integration, and blameless postmortems.
• Strong technical writing: design documents, proposals, runbooks, and post-incident reviews that support engineering decisions. Explain security risks and tradeoffs clearly in writing and conversation.
• Willingness to share the security team's on-call and incident-response responsibilities, including occasional off-hours response.

Responsibilities

• Establish secure software development standards and integrate security into engineering design.
• Create self-service paths for engineering teams to build and deploy securely through documented review workflows, reusable tools, and secure design patterns.
• Perform design and code reviews, threat modeling, and security assessments for GenAI, Creative GenAI, and emerging businesses, including sandbox design and isolation.
• Partner with stakeholders across the organization to build a culture of security-minded builders.
• Triage incoming security issues, prioritize vulnerabilities by risk, and work with engineering teams through timely remediation and verification.
• Assess vendors and AI tools to ensure their security controls and product features support secure employee use.
• Share the security team's on-call and incident-response rotation, including occasional off-hours response.
• Conduct blameless post-incident reviews, document findings, and follow through on remediation.
• Build maintainable security tools and automation, including an AI-assisted code-security triage pilot that produces actionable findings at a false-positive rate engineering will accept.
• Partner with Detection & Response to turn application-security findings and threat models into detection improvements and response guidance.
• Contribute across application, cloud, and infrastructure security as priorities change, including Accelerate and MX.

Skills

Security engineering

Software engineering

Threat modeling

Code review

Security tooling

Cloud security

Tools

Go

Python

Clojure

JavaScript

Job description

Liftoff, a leading AI-powered performance marketing platform for mobile apps, is seeking a Security Engineer to own application security for GenAI and related initiatives. You will partner with engineering to embed secure design, perform threat modeling, and lead code reviews across cloud and on-prem components.

You will build secure tooling, drive incident response readiness, and contribute to security across product, infrastructure, and vendor risk. Remote-first with US-based teams.