Lead AI AppSec Engineer - Flexible Work Options

Capital Group; Charlotte (NC); On-site; USD 194,706 - 311,530; Full time

Benefits offered by this job

Generous time-off and health benefits

2-for-1 charitable gifts matching

On-demand professional development

Job summary

Capital Group seeks an experienced security professional to lead protection of custom and procure AI solutions across our enterprise platforms. The role collaborates with platform, security, and risk engineering teams to embed secure practices into the AI development lifecycle.

The Lead AI AppSec Engineer will champion AI security principles organization-wide, drive automated security checks in the AI SDLC, and work with stakeholders to model threats and respond to AI incidents.

Qualifications

• 8+ years in information security or related fields.
• Strong AI safety knowledge including LLM risks.
• 5+ years automating security checks into CI/CD pipelines (SAST/SCA/DAST).
• Experience with threat modeling frameworks (STRIDE) and agile workflows (Scrum, Kanban).
• Programming proficiency in Python, Java, or .NET.
• Excellent collaboration and stakeholder management.
• Strong communication of security risks to leadership.

Responsibilities

• Embed automated security checks into the AI SDLC and ML‑Ops.
• Threat model complex AI systems with developers and architects.
• Review code for security vulnerabilities in AI-driven systems.
• Lead information security policy and standard setting for AI with risk org.
• Act as AI/Agent security SME for incidents and incident response playbooks.

Skills

Threat modeling

CI/CD security automation

Programming: Python/Java/.NET

Stakeholder collaboration

Tools

SAST

SCA

DAST

Job description

Capital Group seeks an experienced security professional to lead protection of custom and procure AI solutions across our enterprise platforms. The role collaborates with platform, security, and risk engineering teams to embed secure practices into the AI development lifecycle.

The Lead AI AppSec Engineer will champion AI security principles organization-wide, drive automated security checks in the AI SDLC, and work with stakeholders to model threats and respond to AI incidents.