Senior Application Security Engineer

Altimetrik; New Jersey; Hybrid; USD 180,000 - 260,000; Full time

Job summary

Altimetrik in Princeton, NJ / NYC, NY is seeking a Senior Application Security Engineer with hands-on development and a strong background in Python automation. You will build and extend secure software pipelines, integrate AI/ML and LLM tooling, and contribute to secure coding practices.

The role requires deep knowledge of the OWASP Top 10, secure SDLC, threat modeling, and practical experience shipping code.

Qualifications

• 10–15+ years in software engineering and application security.
• Hands-on development experience; not security-adjacent.
• Strong Python for automation and tooling.
• Proficiency with Claude Code and its extensions.
• Working understanding of AI agents and security concerns.
• Depth in secure SDLC, threat modeling, and OWASP Top 10.

Responsibilities

• Develop and ship secure software with hands-on coding.
• Implement Python-based automation workflows and tooling.
• Evaluate Claude Code integrations for security workflows.
• Assess AI agent security risks and mitigations in production.
• Apply secure SDLC and threat modeling across projects.

Skills

Python

AI/LLM familiarity

Security automation

Threat modeling

Secure SDLC

Automation decision making

Tools

Claude Code

Job description

Position : Senior Application Security Engineer

Location : Princeton, NJ & NYC, NY (Hybrid)

Duration : Full Time

We need a candidate with hands on Python automation and good exp in AI/ML & LLM

• 10-15+ years in software engineering and application security, with substantial hands-on development experience (not security-adjacent — you’ve shipped code).
• Strong Python for automation and tooling.
• Proficiency with Claude Code — you use it daily and know your way around its extensibility (skills, subagents, hooks, slash commands, and MCP integrations) to build reusable security workflows and automation, with a clear-eyed view of its strengths and failure modes.
• Working understanding of AI agents and agentic frameworks, and the emerging security concerns around them (OWASP LLM Top 10, agent tool permissions, prompt injection, supply-chain risk in model/tooling).
• Depth in secure SDLC, threat modeling, and common vulnerability classes (OWASP Top 10, API security, authn/authz).
• The judgment to know when to automate, when to elevate, and when to just fix it yourself.

Nice to have

• Experience securing production LLM/agentic systems or building internal AI security tooling.
• Contributions to open-source security tools.
• Relevant certifications (OSCP, GWAPT, CSSLP) — helpful, not required.