Hybrid NYC Senior AppSec Engineer — AI-Driven Security Tooling

Iceberg; New York (NY); Híbrido; USD 400.000 - 600.000; Jornada completa

Descripción de la vacante

Iceberg in New York is seeking an experienced hands-on security engineer with strong software engineering foundations. The role focuses on building security tooling, custom analysis capabilities, and integrating AI-powered workflows into the security delivery process.

You will collaborate directly with engineering teams to identify and solve complex application security problems. The position requires production-quality coding, deep application security knowledge, and the ability to communicate

Formación

• Deep application security knowledge, including secure design, code review, vulnerability research and remediation.
• Strong software engineering ability with production quality code and building security tools.
• Web app security knowledge, authentication, identity protocols and encryption.
• Experience developing custom security tooling, scanners, analysis platforms or other security-focused software.
• Practical experience using AI in engineering workflows, including AI agents, SDKs or automated code analysis.
• Ability to work closely with software engineers and communicate security risks clearly.

Responsabilidades

• Build security tooling and custom analysis capabilities with engineering teams.
• Develop AI-enabled workflows to continuously analyse code changes and identify vulnerabilities.
• Create and maintain security-focused software, scanners, and analysis platforms.
• Collaborate with engineering to resolve complex application security problems and drive secure design.

Conocimientos

Software engineering

Application security

Secure design

Code review

Vulnerability research

AI in security workflows

Security tooling development

Communication with engineers

Descripción del empleo

Iceberg in New York is seeking an experienced hands-on security engineer with strong software engineering foundations. The role focuses on building security tooling, custom analysis capabilities, and integrating AI-powered workflows into the security delivery process.

You will collaborate directly with engineering teams to identify and solve complex application security problems. The position requires production-quality coding, deep application security knowledge, and the ability to communicate