Staff Application Security Engineer — AI-Native, Multi-Tenant

Cybersecurity Jobs; New York (NY); On-site; USD 180,000 - 300,000; Full time

Benefits offered by this job

Full medical, dental, and vision

Equity ownership

Annual learning stipend

Annual wellness stipend

Monthly stipend for AI tools

Daily meal credits (NYC)

Job summary

Listen Labs is building an AI-native product with security baked in from the start. As a Member of Technical Staff in Application Security, you will partner with engineers to protect sensitive data, strengthen multi-tenant isolation, and deliver secure-by-default engineering patterns across APIs, tooling, and deployment pipelines.

Location is New York, onsite. You will design protections, validate boundaries, and build guardrails, libraries, and CI checks to reduce vulnerabilities reaching

Qualifications

• Strong engineering foundation with modern backend stack experience (TypeScript/Terraform).
• Junior-level development mindset prioritized over a single language.
• Working knowledge of the OWASP Top 10 as failure patterns.
• Ability to explain how authorization bugs occur, not just that they exist.
• Comfort thinking in trust boundaries, threat models, and blast radius.

Responsibilities

• Design product-integrated protections for sensitive data and access boundaries.
• Validate trust boundaries and close issues with guardrails and pipeline checks.
• Threat-model AI-related failure cases including prompt injection and data exfiltration.
• Build correct authentication and authorization flows and secure API surfaces.
• Create secure-by-default libraries and wire SAST/DAST/SCA and secrets scanning into CI.
• Review architecture and pull requests and implement fixes when needed.

Skills

Backend security

Junior development

OWASP Top 10

Authorization bugs

Trust boundaries

Threat modeling

Shipping fixes

Authentication & Authorization

Secrets management

Clear communication

Tools

TypeScript

Terraform

OAuth/OIDC

RBAC

Job description

Listen Labs is building an AI-native product with security baked in from the start. As a Member of Technical Staff in Application Security, you will partner with engineers to protect sensitive data, strengthen multi-tenant isolation, and deliver secure-by-default engineering patterns across APIs, tooling, and deployment pipelines.

Location is New York, onsite. You will design protections, validate boundaries, and build guardrails, libraries, and CI checks to reduce vulnerabilities reaching