Senior AI Security Engineer - API & Data Protection

Jobtailor; Washington (District of Columbia); On-site; USD 150,000 - 210,000; Full time

Job summary

Jobtailor in Washington, DC seeks a senior security professional to lead application and AI security efforts. You will own security assessments for AI platforms, apply OWASP Top 10 for LLMs, and design testing for prompt injection and data leakage, ensuring cross-client isolation and governance.

You will embed security into development pipelines, assess API security controls, and communicate risk with leadership.

Qualifications

• Bachelor’s degree or equivalent years of experience in computing or cybersecurity.
• 8+ years in application security or related fields with 3+ years in app security.
• Strong knowledge of OWASP Top 10 and secure coding principles.

Responsibilities

• Own security assessments of AI platforms and AI-enabled tools.
• Apply OWASP Top 10 for LLMs and AI governance standards.
• Design and execute testing for prompt injection and data leakage.
• Build and report AI security posture metrics in business terms.
• Assess API security controls, authentication, and gateway policies.
• Embed security into development pipelines in cloud/hybrid environments.

Skills

OWASP Top 10

Secure Coding Principles

Application Security Testing

Threat Modeling

Secure Code Review

Static Testing

Dynamic Testing

API Security Assessment

Cloud / Hybrid Environments

Communication Skills

Education

Bachelor’s degree in computer science, cybersecurity, or related field

Tools

Azure

SaaS Applications

On-Premises Applications

Automation Tooling

Development Pipelines

Job description

Jobtailor in Washington, DC seeks a senior security professional to lead application and AI security efforts. You will own security assessments for AI platforms, apply OWASP Top 10 for LLMs, and design testing for prompt injection and data leakage, ensuring cross-client isolation and governance.

You will embed security into development pipelines, assess API security controls, and communicate risk with leadership.