Senior AI & App Security Engineer

KSM (Katz, Sapper & Miller); Indianapolis (IN); On-site; USD 120,000 - 180,000; Full time

Job summary

Katz, Sapper & Miller (KSM) in Indianapolis seeks a Senior Application & AI Security Engineer to strengthen the security of internal applications, APIs, and AI-enabled solutions. You will work with developers to identify vulnerabilities, implement fixes, and validate security across AWS, Azure, and CI/CD pipelines.

The role emphasizes authentication, authorization, data protection, LLM risk, and secure coding guidance, with opportunities to influence security across client engagements while

Qualifications

• 6+ years of hands-on software security or related roles.
• Strong knowledge of web app and API security including authentication, authorization, session management, and access control.
• Experience remediating vulnerabilities in production applications and validating fixes.
• Ability to read and review source code and collaborate with developers.
• Familiarity with OWASP Top 10, API Security Top 10, and LLM security considerations.
• Experience integrating security testing into CI/CD pipelines and development workflows.

Responsibilities

• Assess internal applications and APIs for vulnerabilities in authentication, authorization, and data exposure.
• Perform hands-on security testing, code reviews, and architecture assessments; prioritize findings by impact.
• Collaborate with developers to design fixes and independently validate remediation.
• Evaluate legacy apps, integrations, and app-to-app communications for security weaknesses.
• Improve API protections including service auth, object-level auth, and secrets management.
• Integrate security requirements into SDLC and CI/CD pipelines.
• Implement and maintain SAST/DAST and secrets-scanning capabilities.
• Establish secure coding guidance and patterns for AI-enabled development; review changes before production.
• Review architectures across AWS, Azure, and development environments with data isolation in mind.
• Strengthen logging, monitoring, and detection of unauthorized activity across apps and AI integrations.
• Assess AI-enabled apps and agent workflows for prompt injection and data exposure risks.
• Review how AI systems access and transmit client information and controls for AI services.
• Develop practical security testing for AI features and adversarial tests.
• Support investigations involving security incidents and drive corrective actions.
• Track findings and communicate risks and progress to leadership.

Skills

Web application security

API security

Authentication & authorization

OWASP Top 10

CI/CD security

Threat modeling

Tools

SAST tools

DAST tools

Secrets scanning tools

Job description

Katz, Sapper & Miller (KSM) in Indianapolis seeks a Senior Application & AI Security Engineer to strengthen the security of internal applications, APIs, and AI-enabled solutions. You will work with developers to identify vulnerabilities, implement fixes, and validate security across AWS, Azure, and CI/CD pipelines.

The role emphasizes authentication, authorization, data protection, LLM risk, and secure coding guidance, with opportunities to influence security across client engagements while