GenAI Application Security Engineer — Remote

Liftoff; Sacramento (CA); Remote; USD 184,000 - 220,000; Full time

Job summary

Liftoff is a leading AI-powered performance marketing platform for the mobile app economy. The Liftoff Security team protects Liftoff's customers, users, and employees.

We architect Liftoff's security posture and build automation across the stack, focusing on GenAI, Creative GenAI, and emerging businesses. We are seeking an individual contributor to own application security, collaborate with engineering teams, and drive security across cloud and infrastructure.

Qualifications

• 5+ years of security engineering or software engineering experience.
• Strong risk-based prioritization judgment.
• Experience partnering with cross-functional teams to deliver security improvements.
• Write production-quality code for security tools and automation.
• Strong understanding of secure software design, API security, authentication/authorization, threat modeling, and code review.
• Experience assessing cloud and infrastructure security.
• Ability to understand complex engineering systems.
• Strong technical writing: design documents, runbooks, and post-incident reviews.

Responsibilities

• Establish secure software development standards and integrate security into engineering design and development.
• Create self-service paths for secure deployment through documented review workflows, reusable tools, and secure design patterns.
• Perform design and code reviews, threat modeling, and security assessments for GenAI, Creative GenAI, and emerging businesses, including sandbox design and isolation.
• Partner with stakeholders across the organization to build a culture of security-minded builders.
• Triage incoming security issues, prioritize vulnerabilities by risk, and work with engineering teams through timely remediation and verification.
• Assess vendors and AI tools to ensure their security controls and product features support secure employee use.
• Share the security team's on-call and incident-response rotation, including occasional off-hours response.
• Conduct blameless post-incident reviews, document findings, and follow through on remediation.
• Build maintainable security tools and automation, including an AI-assisted code-security triage pilot that produces actionable findings at a false-positive rate engineering will accept.
• Partner with Detection & Response to turn application-security findings and threat models into detection improvements and response guidance.
• Contribute across application, cloud, and infrastructure security as priorities change, including Accelerate and MX.

Skills

Security engineering

Code review

Threat modeling

Cloud security

On-call experience

Written communication

Go

Python

JavaScript

Tools

Go

Python

JavaScript

Job description

Liftoff is a leading AI-powered performance marketing platform for the mobile app economy. The Liftoff Security team protects Liftoff's customers, users, and employees.

We architect Liftoff's security posture and build automation across the stack, focusing on GenAI, Creative GenAI, and emerging businesses. We are seeking an individual contributor to own application security, collaborate with engineering teams, and drive security across cloud and infrastructure.