Remote Staff AI Security Engineer

BambooHR; Draper (UT); Remote; USD 140,000 - 210,000; Full time

Benefits offered by this job

Health, life, and disability insurance

4 weeks of vacation and holidays

Job summary

BambooHR is seeking a Staff Application Security Engineer to lead security for AI features and agentic systems. You’ll set review playbooks, define standards for AI agents, and architect secure tools used by the security team.

Collaborating with engineering, product, and Legal, you will embed security into the SDLC, drive threat modeling, and mentor engineers while maintaining a fast, risk-aware security program.

Qualifications

• Bachelor's degree in Computer Science or related field or equivalent practical experience.
• 8+ years in security with 5+ years in application security.
• Experience securing multi-tenant SaaS platforms and cloud infrastructure.
• Hands-on experience building AI agents or agentic workflows and securing them.

Responsibilities

• Lead security reviews and threat models of AI features and agentic systems.
• Set security standards for AI agents, including data access and permissions.
• Own design of agents for finding validation, triage, and remediation with clear gates.
• Help developers secure agents through self-serve tooling and guidance.
• Embed security requirements into the SDLC and CI/CD pipelines with gating criteria.

Skills

Threat modeling

AI security

OAuth 2.0 / OpenID Connect

Cloud security (AWS/Azure/GCP)

Web security & APIs

Python / TypeScript / PHP

CI/CD security integration

Leadership & mentorship

Education

Bachelor's degree in CS / InfoSec or equivalent

Tools

AWS

Azure

GCP

OpenID Connect

OAuth 2.0

Job description

BambooHR is seeking a Staff Application Security Engineer to lead security for AI features and agentic systems. You’ll set review playbooks, define standards for AI agents, and architect secure tools used by the security team.

Collaborating with engineering, product, and Legal, you will embed security into the SDLC, drive threat modeling, and mentor engineers while maintaining a fast, risk-aware security program.