Senior AI Security Engineer: AppSec, Identity & APIs

Identify Security; United States; On-site; USD 140,000 - 210,000; Full time

Job summary

Identify Security in the United States is seeking a senior security engineer to help secure AI-enabled platforms where application security, identity, APIs, cloud, and autonomous systems intersect. This is not a traditional AppSec role and focuses on capabilities to govern AI actions and permissions.

You will collaborate across security, engineering, product, identity, and AI teams to design practical controls for AI agents, runtime authorization, and fine-grained access policies.

Qualifications

• 8+ years of experience across security engineering, application security, product security, platform security, or similar disciplines.
• Strong hands-on web application and API security experience.
• AppSec and/or DevSecOps engineering experience.
• Deep understanding of OAuth 2.x, OIDC, token-based authorization, delegated access, and service identities.
• Experience designing fine-grained authorization and least-privilege models.
• Strong knowledge of APIs and distributed application architectures.
• Experience with cloud-native environments and service-to-service security.
• Experience with API gateways, WAFs, edge security, or similar controls.
• Experience securing complex, consumer-facing or high-availability applications.
• Exposure to AI-enabled, automation-heavy, or autonomous systems.
• Ability to conceive deterministic security controls for non-deterministic AI behavior.

Responsibilities

• Designing security controls for AI agents and autonomous workflows.
• Establishing runtime authorization and least-privilege boundaries.
• Securing non-human identities, workloads, service accounts, and AI agents.
• Designing delegated authorization using OAuth, OIDC, tokens, and short-lived credentials.
• Maintaining attribution across users, agents, services, APIs, and actions.
• Reviewing complex application and distributed-system architectures.
• Securing high-volume consumer-facing digital and transaction environments.
• Building secure patterns for APIs and backend services.
• Applying strong AppSec and DevSecOps principles.
• Working with API gateways, WAFs, edge controls, and bot mitigation.
• Securing cloud-native, containerized, and service-to-service environments.
• Defining policy enforcement points before sensitive or high-impact actions occur.
• Implementing human-in-the-loop controls where automation should not have full autonomy.
• Designing logging, telemetry, and auditability for AI-enabled systems.
• Helping detect excessive, unintended, or potentially unsafe agent behavior.
• Turning new AI security risks into practical engineering patterns that can be reused across the organization.

Skills

Security engineering

Web API security

OAuth/OIDC

Least-privilege

Runtime security

API gateways/WAFs

Cloud-native security

AppSec/DevSecOps

AI security

Distributed architectures

Job description

Identify Security in the United States is seeking a senior security engineer to help secure AI-enabled platforms where application security, identity, APIs, cloud, and autonomous systems intersect. This is not a traditional AppSec role and focuses on capabilities to govern AI actions and permissions.

You will collaborate across security, engineering, product, identity, and AI teams to design practical controls for AI agents, runtime authorization, and fine-grained access policies.