Senior AI AppSec Engineer

The Capital Group; New York (NY); On-site; USD 190,000 - 304,000; Full time

Benefits offered by this job

Generous time away & health benefits

2-for-1 matching gifts & annual grants

On-demand professional development

Job summary

The Capital Group seeks a Senior AI AppSec Engineer to secure custom and procured AI solutions, enabling Capital Group’s AI strategy while protecting diverse enterprise AI platforms. You will collaborate with platform engineering, security engineering, and risk teams to support scalable, secure AI adoption and review code and data flows for security requirements.

You will procure and build security checks into the AI SDLC, model threats, and lead security guidance across teams, acting as

Qualifications

• 8+ years of information security experience, with depth in areas like application security, platform security, pentesting, DevSecOps, or network security.
• Strong knowledge of safety risks for Large Language Models and AI Agents (OWASP for LLM Top 10, MITRE ATLAS, NIST RMF).
• 5+ years automating security checks (SAST, SCA, DAST) into CI/CD pipelines.
• Experience with STRIDE or other threat modeling frameworks and agile workflows (Scrum/Kanban).
• Proficiency in at least one programming language (Python, Java, .NET).

Responsibilities

• Secure AI development lifecycle with automated security checks embedded in AI SDLC and ML-Ops.
• Threat model complex AI/Agent systems and design security requirements with developers and stakeholders.
• Review code for security vulnerabilities in AI-driven systems.
• Contribute to information security policies and standards in collaboration with technology risk.
• Provide AI/Agent subject matter expertise for incidents and security reviews.

Skills

Information security

Application security

DevSecOps

Threat modeling

Python

Java

.NET

Security risk leadership

CI/CD automation

Tools

Kubernetes

Containers

CI/CD

Cloud service providers

Job description

“I can be myself at work.”

You are more than a job title. We want you to feel comfortable doing great work and bringing your best, authentic self to everything you do. We value your talents, traditions, and uniqueness—and we’re committed to fostering a strong sense of belonging in a respectful workplace.

We intentionally seek diverse perspectives, experiences, and backgrounds, investing in a culture designed to celebrate differences. We believe that belonging leads to better outcomes and a stronger community of associates united by our mission. At Capital, we live our core values every day: Integrity, Client Focus, Diverse Perspectives, Long-Term Thinking, and Community.

“I can influence my income.”

You want to feel recognized at work. Your performance will be reviewed annually, and your compensation will be designed to motivate and reward the value that you provide. You’ll receive a competitive salary, bonuses and benefits. Your company-funded retirement contribution will factor in salary and variable pay, including bonuses.

“I can lead a full life.”

You bring unique goals and interests to your job and your life. Whether you’re raising a family, you’re passionate about where you volunteer, or you want to explore different career paths, we’ll give you the resources that can set you up for success.

• Enjoy generous time-away and health benefits from day one, with the opportunity for flexible work options
• Receive 2-for-1 matching gifts for your charitable contributions and the opportunity to secure annual grants for the organizations you love
• Access on-demand professional development resources that allow you to hone existing skills and learn new ones

“I can succeed as a Senior AI AppSec Engineer at Capital Group”

As a Senior AIAppSecEngineer,you will work with application teams to ensure the security of custom andprocuredAI solutions.You willhelp enable Capital Group’s AIstrategy bybuilding and/orprocuringsolutions toprotecta diverse set of enterprise AI platforms being built and deployed at Capital Group.

You’llcollaborate with platformengineering, security engineering, and risk teams toensure their solutions support scalable, secureadoption of AI. You will use agentic tooling to review code, build data flow diagrams, establish threats and countermeasures funneling to application teams as security requirements.

Additionally,you’llbe advising diverse teams across the organization, andpromotingAI Securityprinciples acrossCapital Group.

• Secure AI Development Lifecycle:You willprocureand/or build technical solutionstoembedautomatedsecuritychecks intothe AI SDLC and ML-Ops.
• AI Threat Modeling:You will threat model complex Agentic and AI systems and design security requirementscollaborativelywith developers,architectsand business stakeholders
• Code analysis:You will review code for security vulnerabilities in the context of AI-driven systems
• Contribute to Standards and Policies:You will providethought leadership forInformation Security policies and standards for AIin collaboration with technology risk
• AI/Agent SME:Youwill provideAI/Agent subject matterexpertisefor AI Incidentsand Security Reviews, and helpdevelop incident response playbooks for AI-related security incidents

“I am the person Capital Group is looking for.”

We recognize that strong candidates may not meet every preferred qualification. If your experience is related and you believe you can contribute to this work, we encourage you to apply.

• You have 8+ years of relevant experience in information security, with depth in one or more areas such as application security, platform security, penetration testing, DevSecOps, or network security. Equivalent experience gained through related technical roles or demonstrable security leadership will also be considered.
• You have strong knowledge ofsecurity of safety risks of Large Language Models and AI Agents(OWASP for LLM Top 10, MITRE ATLAS, NIST RMF, etc.)
• You have 5+ Years ofexperienceautomating security checks, including SAST, SCA, and DAST, directly into CI/CD pipelines
• You have extensive experience with STRIDE/other threat modeling frameworks, agile workflows,including Scrum and Kanban
• You areexperiencedin at least oneprogramming languages (Python, Java,.NET)
• You can effectively partner and collaborate with stakeholder teams.
• You have effective communication skills andthe abilityto outline security riskstoleadership.
• You can learn quickly, use agentic tools to help build a good security understanding under pressure while juggling multiple security assessments / tasks

Preferred Qualifications:

• Youhave knowledge and experience with technologies including Kubernetes, Containers, CI/CD, and Cloud Service Providers
• You are familiar withfunctionand purpose of key AI platform components such as AI gateways (Kong, Databricks Mosaic AI Gateway, custom API orchestration), Model Orchestration (ExamplesLangChain,LlamaIndex, etc.)
• You are familiar withkey AI regulatory frameworks such asNIST AI RMF, MITRE ATLAS, GDPR, EU AI Act,etc
• You have Information Security certifications (CISSP, SANS GIAC, CISA, etc.)

“I can learn more about Capital Group.”

At Capital Group, the success of the people who invest with us depends on the people in whom we invest. That’s why we offer a culture, compensation and opportunities that empower our associates to build successful and prosperous careers. Through nine decades, our goal has been to improve people’s lives through successful investing. We know that our history is a testament to the strength of the people we hire. More than 9,000 associates in 30+ offices around the world help our clients and each other grow and thrive every day. Find us on LinkedIn, Instagram, YouTube and Glassdoor.

Charlotte Base Salary Range: $153,842-$246,147

Southern California Base Salary Range: $179,273-$286,837

New York Base Salary Range: $190,040-$304,064

In addition to a highly competitive base salary, per plan guidelines, restrictions and vesting requirements, you also will be eligible for an individual annual performance bonus, plus Capital’s annual profitability bonus plus a retirement plan where Capital contributes 15% of your eligible earnings.

You can learn more about our compensation and benefits here.

* Temporary positions in the United States are excluded from the above mentioned compensation and benefit plans.

We are an equal opportunity employer, which means we comply with all federal, state and local laws that prohibit discrimination when making all decisions about employment. As equal opportunity employers, our policies prohibit unlawful discrimination on the basis of race, religion, color, national origin, ancestry, sex (including gender and gender identity), pregnancy, childbirth and related medical conditions, age, physical or mental disability, medical condition, genetic information, marital status, sexual orientation, citizenship status, AIDS/HIV status, political activities or affiliations, military or veteran status, status as a victim of domestic violence, assault or stalking or any other characteristic protected by federal, state or local law.