Senior Application Security Engineer with Hands on Python

Hallmark Global Solutions Ltd; Princeton (NJ); On-site; USD 140,000 - 190,000; Full time

Job summary

Hallmark Global Solutions Ltd seeks a senior software engineer with hands-on Python automation and deep AI/ML/LLM experience. You will ship production code and build reusable security workflows around Claude Code while integrating with enterprise tooling.

Candidates should have 8–15+ years in software engineering and application security, a strong SDLC mindset, and a pragmatic approach to automation vs. escalation.

Qualifications

• 8–15+ years in software engineering and application security with hands-on coding.
• Strong Python for automation and tooling.
• Experience with Claude Code and enterprise security tooling.
• Experience with AI agents, LLM security, and agent frameworks.
• Secure SDLC, threat modeling, and familiarity with OWASP Top 10.

Skills

Python automation

Claude Code

AI agents & frameworks

Threat modeling

OWASP Top 10

Tools

Claude Code

Job description

We need a candidate with hands on Python automation and good exp in AI/ML & LLM

• 8-15+ years in software engineering and application security, with substantial hands-on development experience (not security-adjacent — you’ve shipped code).
• Strong Python for automation and tooling.
• Proficiency with Claude Code — you use it daily and know your way around its extensibility (skills, subagents, hooks, slash commands, and MCP integrations) to build reusable security workflows and automation, with a clear-eyed view of its strengths and failure modes.
• Working understanding of AI agents and agentic frameworks, and the emerging security concerns around them (OWASP LLM Top 10, agent tool permissions, prompt injection, supply-chain risk in model/tooling).
• Depth in secure SDLC, threat modeling, and common vulnerability classes (OWASP Top 10, API security, authn/authz).
• The judgment to know when to automate, when to escal….

Nice to have

• Experience securing production LLM/agentic systems or building internal AI security tooling.
• Contributions to open-source security tools.
• Relevant certifications (OSCP, GWAPT, CSSLP) — helpful, not required.