Senior Security Engineer — AI/GenAI & SDLC Security

Stone Co.; United States; Hybrid; USD 120,000 - 180,000; Full time

Benefits offered by this job

Health and dental insurance with co‑pā

24/7 telemedicine

Meal and food allowances

Childcare allowance

Life insurance

Commuting/fuel allowance

Home office allowance for hybrid/tele‑

Educational development platform

Job summary

Stone seeks a security-focused professional to lead application security for LLM and GenAI initiatives. You will work with development teams to bake security into the SDLC, conduct architecture and code reviews, and define guardrails to mitigate prompt injection and over-automation.

You will guide secure tooling usage and train teams on security best practices. Responsibilities include applying SAST/DAST/SCA in CI/CD, supporting incident analysis, and aligning with regulatory and industry

Qualifications

• Higher education in Information Security, CS, IS, or SWE.
• Knowledge of attack vectors and threat modeling.
• Experience with API and mobile app protection.
• Cloud security services (AWS, Azure, GCP).
• Familiarity with agile multidisciplinary teams.
• Familiarity with LLM application risks (OWASP Top 10 for LLM Apps, MITRE ATLAS).
• Ability to communicate concisely; English reading/communication.

Responsibilities

• Define and implement application security strategies for LLM and GenAI.
• Collaborate with development teams to embed security in the SDLC.
• Perform architecture, code, and design reviews to identify vulnerabilities.
• Define guardrails for LLM apps addressing prompt injection and agency.
• Establish guidelines for secure use of AI-assisted development tools.
• Provide technical guidance and security training to teams.
• Apply SAST, DAST, SCA, and secret scanning in CI/CD pipelines.
• Participate in security incident analysis and response.

Skills

Threat modeling

LLM security

Secure SDLC

API protection

Agile teamwork

Strong programming

Security communications

Education

Information Security / CS / IS / Software Engineering degree

Tools

SAST/DAST/SCA

Job description

Stone seeks a security-focused professional to lead application security for LLM and GenAI initiatives. You will work with development teams to bake security into the SDLC, conduct architecture and code reviews, and define guardrails to mitigate prompt injection and over-automation.

You will guide secure tooling usage and train teams on security best practices. Responsibilities include applying SAST/DAST/SCA in CI/CD, supporting incident analysis, and aligning with regulatory and industry