Lead Security Engineer: AI & App Security

HighLevel; United States; Remote; USD 140,000 - 210,000; Full time

Job summary

HighLevel is seeking a Lead Security Engineer – Application Security & AI Security to drive security across our products and platforms. You will lead security reviews, threat modeling, secure SDLC improvements, and vulnerability management for web, mobile, API, and cloud-native services.

You will also perform adversarial testing of LLM apps, AI agents, RAG architectures, and AI integrations, building repeatable security testing playbooks and automation.

Qualifications

• 8+ years in cybersecurity with hands-on security engineering experience.
• Experience in threat modeling, architecture reviews, and secure design.
• Strong knowledge of web, mobile, API, and cloud-native security.
• Hands-on DevSecOps experience with CI/CD security automation.

Responsibilities

• Lead Application Security initiatives across web, mobile, API, and cloud-native products.
• Conduct architecture reviews, threat modeling, secure design and code reviews.
• Identify weaknesses in authentication, authorization, tenant isolation, and API security.
• Define security standards, guardrails, and reusable patterns.
• Improve security testing across CI/CD pipelines (SAST, DAST, SCA, secrets).
• Drive vulnerability triage and remediation with engineering teams.
• Develop security automation and provide developer guidance and training.
• Lead security reviews of LLM apps, AI agents, and AI integrations.
• Assess AI architectures, data pipelines, prompts, and model APIs.

Skills

Security leadership

Threat modeling

Secure SDLC

Vulnerability management

Security reviews

Communication

Tools

Docker

Kubernetes

Python

Go

JavaScript

Job description

HighLevel is seeking a Lead Security Engineer – Application Security & AI Security to drive security across our products and platforms. You will lead security reviews, threat modeling, secure SDLC improvements, and vulnerability management for web, mobile, API, and cloud-native services.

You will also perform adversarial testing of LLM apps, AI agents, RAG architectures, and AI integrations, building repeatable security testing playbooks and automation.