Staff AI Security Engineer for Applications&Agentic Systems

Hispanic Alliance for Career Enhancement; Lansing (MI); On-site; USD 107,000 - 284,000; Full time

Benefits offered by this job

Medical coverage

Dental coverage

Vision coverage

Paid time off

Retirement savings

Job summary

CVS Health is seeking a Staff Application Security Engineer - AI & Agentic Systems to secure AI-enabled applications, large language model integrations, and agentic systems. You will partner with engineering, product, and data teams to embed security into design, development, and operation of AI-driven solutions.

You will define secure design patterns, conduct threat modeling, and guide teams on secure development practices, supporting responsible AI security controls across the enterprise.

Qualifications

• 7+ years of experience designing, building, or securing enterprise-scale applications and platforms.
• 5+ years of application security experience, including threat modeling, secure design, code review, and vulnerability management.
• 5+ years of programming experience in one or more languages such as Python, Java, JavaScript, C#, or Go.
• 3+ years of experience developing or securing AI, machine learning, or generative AI solutions.
• 3+ years of experience with public cloud platforms including AWS, Azure, or Google Cloud Platform.

Responsibilities

• Develop and maintain application and AI security standards, best practices, and guardrails.
• Promote secure-by-design principles across application and AI development lifecycles.
• Establish secure design patterns for AI agents, prompt management, tool integrations, memory handling, and autonomous workflows.
• Partner with engineering teams to identify and mitigate AI-specific security risks such as prompt injection, model abuse, data leakage, and unauthorized agent actions.
• Review architectures utilizing large language models, retrieval augmented generation pipelines, AI agents, and AI-powered workflows.
• Define and recommend identity, authorization, data protection, observability, and governance controls for AI environments.
• Collaborate with AI platform, engineering, product, and data teams to ensure secure and responsible AI adoption.
• Perform threat modeling, architecture reviews, and security assessments for applications and AI-enabled systems.
• Conduct security analysis of AI workflows, model integrations, agent interactions, and data flows.
• Partner with engineering teams to prioritize and remediate security findings.
• Evaluate emerging AI security tools and technologies to improve organizational security posture.
• Influence engineering teams to integrate security controls into development processes and product roadmaps.
• Partner with privacy, compliance, legal, and risk teams to align security controls with organizational requirements.
• Provide guidance on AI security considerations, emerging threats, and industry best practices.
• Participate in strategic initiatives supporting secure AI adoption across the enterprise.
• Support investigation and response efforts involving application and AI-related security events.
• Assist in identifying root causes and implementing long-term security improvements.
• Drive continuous improvement of security controls, processes, and engineering practices.
• Mentor security engineers and development teams on secure coding, threat modeling, and AI security best practices.
• Contribute to the evaluation of emerging AI security research, technologies, and industry standards.
• Help advance the organization's application and AI security strategy through innovation and technical leadership.

Skills

Enterprise security

Threat modeling

App security

Programming: Python/Java/JS/C#

AI security

Cloud platforms

Education

Bachelor's degree

Job description

CVS Health is seeking a Staff Application Security Engineer - AI & Agentic Systems to secure AI-enabled applications, large language model integrations, and agentic systems. You will partner with engineering, product, and data teams to embed security into design, development, and operation of AI-driven solutions.

You will define secure design patterns, conduct threat modeling, and guide teams on secure development practices, supporting responsible AI security controls across the enterprise.