Senior API & AI Security Engineer

KSM Business Services, Inc.; Indianapolis (IN); On-site; USD 130,000 - 190,000; Full time

Job summary

KSM is seeking a Senior Application & AI Security Engineer to advance the security of internally developed apps, APIs, and AI-enabled solutions. You will work with software teams to identify vulnerabilities, design fixes, and validate remediation across AWS/Azure environments.

Responsibilities include securing REST APIs, integrating security into CI/CD, and evaluating AI/LLM workflows for prompt injection and data exposure, with a focus on practical risk reduction.

Qualifications

• 6+ years of hands-on experience in software development, app security, or related roles.
• Strong knowledge of web app and API security, including auth, session management, access control.
• Experience identifying, remediating, and validating vulnerabilities in production apps.

Responsibilities

• Assess apps and APIs for vulnerabilities in authentication, authorization, and data exposure.
• Conduct hands-on security testing, code reviews, and architecture assessments.
• Work with developers to design and validate fixes; ensure vulnerabilities are resolved.
• Evaluate legacy apps, integrations, and app-to-app communications for security weaknesses.
• Improve API protections, including service authentication, authorization, secrets management, rate limiting.
• Integrate security requirements into SDLC and CI/CD pipelines.
• Establish SAST/DAST and secrets-scanning capabilities and secure coding guidance.

Skills

Web security

API security

Security testing

CI/CD security

LLM security

Tools

SAST

DAST

Secrets-scanning

Job description

KSM is seeking a Senior Application & AI Security Engineer to advance the security of internally developed apps, APIs, and AI-enabled solutions. You will work with software teams to identify vulnerabilities, design fixes, and validate remediation across AWS/Azure environments.

Responsibilities include securing REST APIs, integrating security into CI/CD, and evaluating AI/LLM workflows for prompt injection and data exposure, with a focus on practical risk reduction.