Remote Staff AI Security Engineer

BambooHR; Utah; Hybrid; USD 170,000 - 210,000; Full time

Benefits offered by this job

Health insurance

Life insurance

Disability insurance

4 weeks vacation

Company holidays

Parental leave

Volunteer time off

Job summary

BambooHR seeks a Staff Application Security Engineer to lead security across AI features and agentic systems. You will define standards, design secure agents, and collaborate with engineering, product, and legal teams to embed security in the SDLC.

The role requires building threat models, reviewing complex APIs, and mentoring security engineers. This is a remote position within Utah, with a focus on scalable security across BambooHR’s platform.

Qualifications

• 8+ years of experience in security, including 5+ years in application security.
• Experience securing multi-tenant SaaS platforms is preferred.
• Cloud and infrastructure security experience (AWS/Azure/GCP).
• Hands-on experience building AI agents or agentic workflows with permissions, validation, and CI/CD integration.
• Ability to evaluate security of AI and agentic systems, incl. prompt injection and data leakage.
• Proven experience leading threat modeling and design reviews for complex apps and APIs.
• Strong web app and API security knowledge: OAuth, OIDC, tokens, access control.

Responsibilities

• Lead security reviews and threat models for AI features and agentic systems.
• Define and enforce security standards for AI agents and data access.
• Design agents for finding validation, triage, and remediation with clear permissions and approvals.
• Assist developers with secure design and threat modeling.
• Embed security requirements into SDLC and CI/CD with gates and policies.
• Manage cross-team security programs, milestones, and reporting to leadership.
• Represent AppSec in architecture forums and coordinate with Legal and Privacy.

Skills

Security engineering

Application security

Threat modeling

OWASP / frameworks

AI security

OAuth / OpenID

Python

TypeScript

Mentoring

Cross-team work

Education

Bachelor's degree in CS or related

Tools

AWS

Azure

GCP

CI/CD tooling

Job description

BambooHR seeks a Staff Application Security Engineer to lead security across AI features and agentic systems. You will define standards, design secure agents, and collaborate with engineering, product, and legal teams to embed security in the SDLC.

The role requires building threat models, reviewing complex APIs, and mentoring security engineers. This is a remote position within Utah, with a focus on scalable security across BambooHR’s platform.