Lead, Application and AI Security Engineer

Under Armour; Baltimore (MD); Hybrid; USD 155,000 - 200,000; Full time

Benefits offered by this job

Paid "UA Give Back" Volunteer Days

Under Armour Merchandise Discounts

Competitive 401(k) plan matching

Maternity and Parental Leave for FMLA-

Health & fitness benefits

Job summary

Under Armour is hiring a Lead Application and AI Security Engineer to secure our Direct-to-Consumer and Business-to-Business applications. You will drive secure-by-design practices, establish guardrails for AI-enabled solutions, and advance AI security across the software development lifecycle.

You will mentor teams, define security standards for GenAI/LLMs, and partner with engineering to embed controls into CI/CD pipelines and developer platforms.

Qualifications

• Bachelor's degree in computer science/IT/engineering or related discipline with typically 8 years of cyber security experience or Master's degree with typically 6 years of relevant experience or typically 12 years of relevant work experience without degree
• Understanding of how modern engineering teams build software using AI coding assistants, code generation platforms, and AI-powered services
• Requires 5+ years of application security experience
• Strong familiarity with OWASP Top 10, OWASP API Security Top 10, OWASP Top 10 for LLM Applications, and secure AI software development practices
• Strong familiarity with secrets detection, SAST, DAST, SCA, & API security testing
• Experience securing AI-enabled applications, including LLMs, AI agents, MCP integrations, prompt injection defenses, model governance, and data protection controls
• Experience using AI to code scripts that leverage APIs to build custom application security solutions
• Strong cross-functional teaming skills to coordinate and implement security enhancements with product and engineering teams

Responsibilities

• Define and execute our application and AI security strategy, policies, and roadmap across all of our software development teams
• Lead the integration of AI-powered security capabilities across the software development lifecycle
• Partner with engineering teams to embed security and AI controls into developer coding platforms, CI/CD pipelines, and applications
• Serve as the technical lead for AI security initiatives across web, mobile, API, and third-party AI service consumption
• Develop application and AI security standards for technology that consumes, integrates, or builds AI/ML capabilities
• Establish governance, guardrails and security requirements for the development, deployment, and operation of GenAI, LLMs, and agentic solutions
• Evaluate, pilot, and operationalize emerging AI security technologies
• Define acceptable use policies, code review requirements, data protection controls, and validation processes for AI-generated code
• Mentor developers, architects, and engineering leaders on secure application development practices

Skills

Application security

AI security

Security governance

CI/CD security

Secure-by-design

Security in software development

Cross-functional teaming

Education

Bachelor's degree in CS/IT/Engineering

Master's degree

12 years of relevant work experience without degree

Job description

Values & Innovation

At Under Armour, we are committed to empowering those who strive for more, and the company's values - Act Sustainably, Celebrate the Wins, Fight on Together, Love Athletes and Stand for Equality - serve as both a roadmap for our teams and the qualities expected of every teammate.

Our Values define and unite us, the beliefs that are the red thread that connects everyone at Under Armour. Our values are rallying cries, reminding us why we're here, and fueling everything we do. Our pursuit of better begins with innovation and with our team's mission of being the best. With us, you get the freedom to go further - no matter your role. That means developing, delivering, and selling the state-of-the-art products and digital tools that make top performers even better.

Purpose of Role

As a Lead Application and AI Security Engineer in our Digital Product Security organization, you will secure Under Armour’s portfolio of Direct-to-Consumer & Business-to-Business applications. As a secure software and AI security leader, you will drive secure-by-design development practices, establish security guardrails for AI-enabled solutions, and advance AI-powered security capabilities across our software development lifecycle. You will also build AI-based security capabilities and leverage industry-leading solutions to protect our customer applications and data spanning web applications, mobile applications, and application programming interfaces (APIs).

Your Impact

• Define and execute our application and AI security strategy, policies, and roadmap across all of our software development teams
• Lead the integration of AI-powered security capabilities across the software development lifecycle
• Partner with engineering teams to embed security and AI controls into developer coding platforms, CI/CD pipelines, and applications
• Serve as the technical lead for AI security initiatives across web, mobile, API, and third-party AI service consumption
• Develop application and AI security standards for technology that consumes, integrates, or builds AI/ML capabilities
• Establish governance, guardrails and security requirements for the development, deployment, and operation of GenAI, LLMs, and agentic solutions
• Evaluate, pilot, and operationalize emerging AI security technologies
• Define acceptable use policies, code review requirements, data protection controls, and validation processes for AI-generated code
• Mentor developers, architects, and engineering leaders on secure application development practices

Qualifications

• Bachelor's degree in computer science/IT/engineering or a related discipline with typically 8 years of cyber security experience or Master's degree with typically 6 years of relevant experience or typically 12 years of relevant work experience without degree
• Understanding of how modern engineering teams build software using AI coding assistants, code generation platforms, and AI-powered services
• Requires 5+ years of application security experience
• Strong familiarity with OWASP Top 10, OWASP API Security Top 10, OWASP Top 10 for LLM Applications, and secure AI software development practices
• Strong familiarity with secrets detection, SAST, DAST, SCA, & API security testing
• Experience securing AI-enabled applications, including LLMs, AI agents, MCP integrations, prompt injection defenses, model governance, and data protection controls
• Experience using AI to code scripts that leverage APIs to build custom application security solutions
• Strong cross-functional teaming skills to coordinate and implement security enhancements with product and engineering teams

Workplace Location

• Location: Candidates must reside within a commutable distance to our corporate headquarters in Baltimore, Maryland, as periodic on-site attendance may be required
• Work Schedule: Remote with periodic on-site attendance
• Travel: 1-2 times per year
• Sponsorship Eligibility: UA does not offer sponsorship of job applicants for employment-based work authorization for this position at this time.

Relocation

No relocation provided

Base Compensation

$155,000.00-$200,000.00 USD Most new hires fall within this range and have the opportunity to earn more over time. Initial placement within the salary range, however, is based on an individual's relevant knowledge, skills and experience for the position. UA is committed to helping our teammates succeed and advance in their careers. Base salary is only one component of our competitive Total Rewards package.

Benefits & Perks

• Paid "UA Give Back" Volunteer Days: Work alongside your team to support initiatives in your local community
• Under Armour Merchandise Discounts
• Competitive 401(k) plan matching
• Maternity and Parental Leave for eligible and FMLA-eligible teammates
• Health & fitness benefits, discounts and resources- We offer teammates across the country programs to promote physical activity and overall well-being

Our Commitment to Equal Opportunity

At Under Armour, we are committed to providing an environment of mutual respect where equal employment opportunities are available to all applicants and teammates without regard to race, color, religion or belief, sex, pregnancy (including childbirth, lactation and related medical conditions), national origin, age, physical and mental disability, marital status, sexual orientation, gender identity, gender expression, genetic information (including characteristics and testing), military and veteran status, family or paternal status and any other characteristic protected by applicable law. Under Armour seeks to recruit, develop and retain the most talented people representing a wide variety of backgrounds and perspectives. If a reasonable accommodation is needed to participate in the job application or interview process, please contact our Human Resources team via [e-mail].