Senior AppSec Engineer II — Remote AI Security Leader

Rainfall Ventures; United States; Remote; USD 140,000 - 180,000; Full time

Benefits offered by this job

Health, Dental, Vision benefits

401(k) match up to 2%

Generous PTO & holidays

Parental leave at 6 months tenure

Professional development reimbursement

Job summary

Spring Health is seeking a Senior Application Security Engineer II for its remote team within the United States. You will advance SAST, SCA, and DAST programs, mentor engineers, and help shape a Secure AI Development Lifecycle while evaluating AI tooling to improve security coverage.

You’ll work across AI-integrated product features and threat modeling, supporting vulnerability remediation and risk assessment with CI/CD and cloud security expertise.

Qualifications

• Hands-on experience with DAST, SAST, and SCA tools, and manual testing techniques (OWASP, SANS Top 25).
• Experience securing CI/CD pipelines with commercial and custom-built tooling.
• Experience with IaaS cloud infrastructure (AWS, Azure, or GCP) and containers.
• Security automation experience in Go, Python, JavaScript, or Ruby.
• Familiarity with AI/ML security concepts and OWASP LLM Top 10.
• Knowledge of AI/LLM tooling and integration into automated workflows.
• Experience implementing controls aligned to NIST CSF, HIPAA, ISO-27001, or SOC-2.

Responsibilities

• Contribute to secure-by-design practices within the S-SDLC program and conduct security guidance across the lifecycle.
• Mentor engineers on secure coding practices and career growth.
• Develop AI-assisted threat modeling and scale it across the organization.
• Advance SAST, SCA, and DAST programs through tuning and coverage improvements.
• Perform security-focused code reviews of internal and open-source libraries.
• Support vulnerability remediation and validate fixes per workflows.
• Identify and implement security automation using Go, Python, JS, or Ruby.
• Assess AI-integrated product features for risks like prompt injection and data leakage.
• Contribute to a Secure AI Development Lifecycle aligned with OWASP Top 10 for LLM apps.
• Evaluate AI-assisted security tooling to improve program coverage.

Skills

DAST

SAST

SCA

CI/CD security

Cloud security

Go/Python/JS/Ruby

AI/ML security

LLM tooling

Security automation

Cross-functional collaboration

Education

Bachelor’s degree in CS/Engineering/MIS/IT

Tools

OpenAI

LangChain

Job description

Spring Health is seeking a Senior Application Security Engineer II for its remote team within the United States. You will advance SAST, SCA, and DAST programs, mentor engineers, and help shape a Secure AI Development Lifecycle while evaluating AI tooling to improve security coverage.

You’ll work across AI-integrated product features and threat modeling, supporting vulnerability remediation and risk assessment with CI/CD and cloud security expertise.