Staff Application Security Engineer (Fully Remote)

BambooHR; United States; Remote; USD 120,000 - 180,000; Full time

Job summary

BambooHR is seeking an experienced security leader to drive risk management for AI-enabled features and agentic systems. You will define standards for identity and data access, and ensure safe tool handling across product areas.

In collaboration with engineering and product leadership, you will embed security requirements into the SDLC, establishing design-time and release-time gates for AI features and overseeing validation, triage, and remediation with clear criteria and human approvals.

Qualifications

• Lead security reviews and threat modeling for AI features and agentic systems.
• Define standards for identity, data access, and safe tool handling.
• Collaborate with engineering and product to embed security into SDLC stages.

Responsibilities

• Lead security reviews and threat models of AI features and agentic systems, setting standards for identity, data access, and safe tool handling.
• Own the design of security team agents for validation, triage, and remediation, with clear evaluation criteria and human approval gates.
• Partner with engineering and product leadership to embed security requirements into the SDLC, including design-time and release-time gates for AI features.

Skills

Security reviews

Threat modeling

AI security

Identity access

Tool handling safety

Tools

SDLC gates

Job description

• - Lead security reviews and threat models of AI features and agentic systems, setting standards for identity, data access, and safe tool handling.
• - Own the design of security team agents for validation, triage, and remediation, building them with clear evaluation criteria and human approval gates.
• - Partner with engineering and product leadership to embed security requirements into the SDLC, including design-time and release-time gates for AI features.