IT Security Engineer

Indium Technologies Inc; Seattle (WA); On-site; USD 120,000 - 180,000; Full time

Job summary

Indium Technologies Inc. is seeking Security Engineers to support Engineering Security initiatives across security and privacy reviews, threat modeling, and third-party AI Agent security testing.

The selected engineers will work closely with engineering, security, privacy, and third-party teams to identify security risks, conduct hands-on assessments, and provide remediation guidance with actionable findings and evidence.

Responsibilities

• Conduct security and privacy design reviews of services, applications, APIs, engineering proposals, and AI integrations; evaluate architecture, data flows, access controls, trust boundaries, and proposed safeguards.
• Perform threat modeling for critical services and AI agents, identifying attack surfaces, threat scenarios, potential attack paths, mitigations, and residual risk.
• Assess third-party AI agents through hands-on adversarial security testing, including prompt injection, tool misuse, data access, permissions, external integrations, excessive agency, and sensitive-data exposure.

Skills

Security design reviews

Threat modeling

Adversarial security testing

Remediation guidance

Tools

Security testing tools

Job description

We are looking for Security Engineers to support Engineering Security initiatives across security and privacy reviews, threat modeling, and third-party AI Agent security testing. The selected engineers will work closely with engineering, security, privacy, and third-party teams to identify security risks, conduct hands-on assessments, and provide actionable remediation guidance.

Key Responsibilities

Core responsibilities include:

• Conduct security and privacy design reviews of services, applications, APIs, engineering proposals, and AI integrations; evaluate architecture, data flows, access controls, trust boundaries, and proposed safeguards.
• Perform threat modeling for critical services and AI agents, identifying attack surfaces, threat scenarios, potential attack paths, mitigations, and residual risk.
• Assess third-party AI agents through hands‑on adversarial security testing, including prompt injection, tool misuse, data access, permissions, external integrations, excessive agency, and sensitive‑data exposure.
• Document actionable findings, risk assessments, supporting evidence, and practical remediation guidance; partner with engineering and security teams through remediation and validation.
• Support repeatable security assessment processes, including review checklists, threat models, test cases, reporting templates, and AI-assisted/automation workflows where appropriate.