Senior Security Engineer, Secure Dev & AI

Xtium; United States; Remote; USD 140,000 - 200,000; Full time

Job summary

XTIUM is seeking a Security Engineer, Secure Development to establish and enforce security standards for all internal software, automation, and AI-enabled solutions prior to release. You will lead security governance across development teams and partner with engineering, platform, and compliance groups to embed security into the software lifecycle.

This role emphasizes hands-on execution, technical depth, and influence through tooling and standards, while ensuring compliance with privacy and

Qualifications

• 8+ years of experience in application security, DevSecOps, or secure software development.
• Strong hands-on experience reviewing code in one or more modern languages (e.g., Python, JavaScript/TypeScript, C#, Java, Go).
• Proven experience securing APIs, web applications, microservices, and cloud-native platforms.
• Experience integrating security controls into CI/CD pipelines and modern DevOps workflows.
• Deep understanding of common vulnerabilities and attack patterns (OWASP Top 10, API security risks, supply chain threats).
• Ability to balance security rigor with delivery velocity in a customer-facing MSP environment.

Responsibilities

• Own and enforce secure development standards for all internally built applications, platforms, automation, and tooling.
• Perform and oversee manual and automated code reviews (static, dynamic, dependency, and supply-chain analysis).
• Establish release gates requiring security approval before software or AI systems are delivered or promoted.
• Define remediation standards and risk acceptance criteria for security findings.
• Conduct secure design reviews and threat modeling during early development to identify and mitigate risk.
• Review internally developed AI models, agents, prompts, integrations, and data pipelines for security, privacy, and misuse risk.
• Ensure AI systems comply with governance and regulatory expectations.
• Partner with engineering and data teams to implement secure AI development patterns, including data protection, access controls, and auditability.
• Integrate security tooling into CI/CD pipelines (SAST, DAST, dependency scanning, container scanning, secrets detection).
• Promote shift-left security practices and reduce late-stage blockers through developer enablement.
• Collaborate with DevOps and Platform teams on secure delivery pipelines and runtime controls.
• Protect XTIUM's IP by ensuring secure design and controlled access to source repositories.
• Support compliance efforts across SOC 2, ISO 27001, and customer-specific security requirements.
• Produce audit-ready artifacts including risk assessments, code review records, and security sign-offs.
• Act as the primary application security escalation point for engineering and leadership.
• Mentor developers on secure coding practices and threat modeling.
• Provide executive-level reporting on security posture, trends, and risk exposure.

Skills

Application security

DevSecOps

Secure SDLC

Code review

CI/CD integration

Tools

SAST

DAST

Dependency scanning

Container scanning

Secrets detection

Job description

XTIUM is seeking a Security Engineer, Secure Development to establish and enforce security standards for all internal software, automation, and AI-enabled solutions prior to release. You will lead security governance across development teams and partner with engineering, platform, and compliance groups to embed security into the software lifecycle.

This role emphasizes hands-on execution, technical depth, and influence through tooling and standards, while ensuring compliance with privacy and