Security Engineer — Secure AI-Powered Apps & CI/CD

Air Apps; San Francisco (CA); On-site; USD 110,000 - 193,000; Full time

Benefits offered by this job

Annual Bonus

Medical Insurance (vision & dental)

Disability insurance - short and long‑

Disability insurance - short and long‑

401k up to 4%

Air Conference

Transportation budget

Free meals at the hub

Gym membership

Job summary

Air Apps, a Lisbon-born, San Francisco–based AI company, seeks a Security Engineer to safeguard applications, infrastructure, and data from threats. You will implement secure coding, vulnerability scanning, and threat modeling with DevOps and IT teams.

You will help evolve a secure development lifecycle, security monitoring frameworks, and proactive risk mitigation while staying ahead of threats and regulatory standards.

Qualifications

• Around 4+ years of experience in cybersecurity, application security, or security engineering.
• Strong knowledge of secure coding principles and threat modeling techniques.
• Experience with vulnerability scanning tools and pentesting methodologies.

Responsibilities

• Develop and implement threat modeling to identify security risks across applications and infrastructure.
• Conduct vulnerability scanning, penetration testing, and security assessments to detect weaknesses.
• Define and enforce secure coding practices with development teams.
• Collaborate with DevOps to integrate security into CI/CD pipelines and automate testing.
• Monitor and respond to security incidents, conduct root cause analysis, and implement preventative measures.
• Ensure compliance with security standards (ISO 27001, GDPR, SOC 2).
• Design IAM policies, encryption standards, and authentication mechanisms.
• Collaborate with product teams to review security of features, APIs, and integrations.
• Develop incident response plans and security documentation.

Skills

Secure coding principles

OWASP Top 10

Threat modeling

Vulnerability scanning

Penetration testing

Security monitoring

Scripting (Python, Bash, PowerShell)

Cloud security (AWS, Azure, GCP)

IAM and encryption

DevSecOps in CI/CD

Tools

Nessus

Qualys

Burp Suite

SIEM

IDS

Job description

Air Apps, a Lisbon-born, San Francisco–based AI company, seeks a Security Engineer to safeguard applications, infrastructure, and data from threats. You will implement secure coding, vulnerability scanning, and threat modeling with DevOps and IT teams.

You will help evolve a secure development lifecycle, security monitoring frameworks, and proactive risk mitigation while staying ahead of threats and regulatory standards.