Senior AI Application Security Engineer

duvari group; St. Louis (MO); On-site; USD 136,000 - 184,000; Full time

Job summary

duvari group seeks a Senior AI & Application Security Engineer to lead security initiatives for both traditional apps and AI-enabled systems. You will drive testing, threat modeling, and secure architecture across software, models, agents, and MCP integrations.

Ideal candidates have 8–10 years of security and development experience, expertise in SAST/DAST/SCA, and strong cloud security knowledge. Remote tooling and guardrails will be emphasized.

Qualifications

• 8–10 years of combined information security and software development experience.
• Deep knowledge of application security, AI security, threat modeling, and secure architecture.
• Experience with SAST, DAST, SCA, API security, mobile security, and red team tooling.
• Experience assessing LLM/agentic systems, AI integrations, and related risks.
• Cloud computing and cloud security knowledge; strong communication and problem-solving skills.
• Bachelor's degree or equivalent in CS/IS/Cybersecurity or related field.

Responsibilities

• Lead security testing for traditional applications and AI-enabled systems.
• Conduct threat modeling and security assessments across platforms and integrations.
• Mitigate AI-specific risks including prompt injection and data leakage.
• Guide teams on secure coding, architecture, and secure-by-design practices.
• Evaluate and implement security tooling: AI/MCP gateways, monitoring, governance.
• Automate security processes using Python, cloud services, and CI/CD pipelines.
• Mentor junior engineers and mature application and AI security practices.

Skills

Application security

AI security

Threat modeling

Secure architecture

SAST

DAST

SCA

API security

Cloud security

Education

Bachelor's degree or equivalent in CS/IS/Cybersecurity

Tools

CI/CD pipelines

LLM/agentic systems

AWS/Azure

Job description

Senior AI & Application Security Engineer

Join an enterprise security team responsible for securing both traditional applications and emerging AI-enabled systems. This senior engineer will lead security initiatives across the software and AI lifecycles, including applications, models, agents, skills, and MCP integrations.

What You'll Do

• Lead application and AI security testing using SAST, SCA, DAST, API/mobile testing, and AI red teaming.
• Conduct threat modeling and security assessments across applications, AI platforms, models, agents, skills, and MCP integrations.
• Identify and mitigate AI-specific risks including prompt injection, model abuse, insecure integrations, and data leakage.
• Guide development teams on secure coding, remediation, architecture, and secure-by-design practices.
• Evaluate and implement security tooling, including AI/MCP gateways, runtime monitoring, governance, and posture management.
• Automate security processes using Python, cloud services, and CI/CD pipelines.
• Define application and AI security standards, guardrails, and implementation guidance.
• Mentor junior engineers and help mature application and AI security practices.

What We're Looking For

• 8–10 years of combined information security and software development experience.
• Deep knowledge of application security, AI security, threat modeling, and secure architecture.
• Experience with SAST, DAST, SCA, API security, mobile security, and red team tooling.
• Experience assessing LLM/agentic systems, AI integrations, and associated security risks.
• Working knowledge of cloud computing and cloud security.
• Strong technical communication, analytical, and problem-solving skills.
• Bachelor's degree in Computer Science, Information Systems, Cybersecurity, or related field, or equivalent education and experience.

Nice to Have

• C#, Angular, and Python experience.
• AWS or Microsoft Azure experience.
• CISSP, CSSLP, GIAC, or similar security certification.
• Experience with AI coding assistants, MCPs, Agents, AI red teaming, and AI/MCP gateways.

Compensation:

$160,000 per year