Remote Senior AppSec Engineer II: AI Security Lead

Spring Health; New York (NY); Remote; USD 150,000 - 210,000; Full time

Benefits offered by this job

Health/Dental/Vision benefits

401(k) match

Therapist network access

Paid time off

Parental leave

Wellbeing programs

Fertility care support

Professional development reimbursement

Donation matching

Job summary

Spring Health is seeking a Senior Application Security Engineer II to join our growing AppSec team. You will mature and expand our SAST, SCA, and DAST capabilities while helping shape a Secure AI Development Lifecycle (ADLC).

This is a full-time, remote position open to candidates within the United States, with occasional travel to our NYC headquarters. You will mentor engineers, drive AI-assisted threat modeling, and contribute to security assessments of AI-enabled product features, CI/CD

Qualifications

• 7+ years of professional experience in application security or a related field.
• Hands-on with DAST, SAST, and SCA tools and manual testing techniques.
• Experience securing CI/CD pipelines with tooling.
• Cloud infrastructure and container technologies (AWS/Azure/GCP).
• Security automation in Go, Python, JavaScript, or Ruby.
• Familiar with AI/ML security concepts and LLM tooling.
• Knowledge of standards such as NIST CSF, HIPAA, ISO-27001, SOC-2.

Responsibilities

• Advance secure-by-design practices within the S-SDLC program and guide architecture reviews.
• Mentor engineers on secure coding practices and AppSec fundamentals.
• Develop an AI-assisted threat modeling program and scale it across the org.
• Improve SAST/SCA/DAST programs through rule tuning and coverage expansion.
• Perform security-focused code reviews of libraries and vendor code.
• Support vulnerability remediation and validate fixes per workflows.
• Implement security automation using Go, Python, JavaScript, or Ruby.
• Assess AI-integrated feature security, including LLM APIs and data pipelines.
• Contribute to a Secure AI Development Lifecycle aligned with OWASP Top 10 for LLMs.

Skills

Secure coding

CI/CD security

Cloud security

AI/ML security

Threat modeling

Vulnerability remediation

Cross-functional collaboration

SAS/SCA/DAST tooling

Education

Bachelor's degree in CS/Engineering

Tools

SAST tools

SCA tools

DAST tools

CI/CD tooling

Job description

Spring Health is seeking a Senior Application Security Engineer II to join our growing AppSec team. You will mature and expand our SAST, SCA, and DAST capabilities while helping shape a Secure AI Development Lifecycle (ADLC).

This is a full-time, remote position open to candidates within the United States, with occasional travel to our NYC headquarters. You will mentor engineers, drive AI-assisted threat modeling, and contribute to security assessments of AI-enabled product features, CI/CD