Staff security engineer, application security

present of AI; New York (NY); On-site; USD 180,000 - 240,000; Full time

Job summary

Writer is seeking a Staff Security Engineer focused on application security to build and run an end-to-end security program for our AI platform. The role requires hands-on security work on large production systems, comfort with reading multiple programming languages, and the judgment to balance automation with manual review.

You will model threats for LLM-based features, integrate scanning into CI/CD, and collaborate with engineers to enable fast, secure delivery of AI capabilities.

Qualifications

• Several years of hands-on application security experience on large production systems.
• Comfort reading code in multiple languages.
• Judicious use of automation to speed delivery while maintaining security.

Responsibilities

• Build and run an application security program for an AI platform.
• Threat model new features and architectures including LLM systems.
• Set up scanning in build pipelines and review critical code.
• Work closely with engineers to keep security as an enabler of delivery.

Skills

AppSec program ownership

Threat modeling

SAST/DAST in CI/CD

Code reading (multiple languages)

Automation vs manual review

Engineers collaboration

Tools

CI/CD tooling

Job description

Staff security engineer, application security

The role asks for someone who can build and run an application security program for an AI platform, from threat modeling new features to setting up scanning in build pipelines and reviewing critical code. A strong candidate brings several years of hands on application security work on large production systems, comfort reading code in more than one language, and the judgment to know when automation beats manual review. It also calls for someone who works well with engineers and treats security as a way to keep delivery moving rather than a gate.

How it fits the AI era

Much of the routine scanning, triage and pattern spotting can be handled by AI agents, and the posting explicitly wants the security team to use them to move faster. What stays human is the design work: threat modeling LLM architectures, judging novel attack paths against generative AI, and persuading product teams to make secure choices early. The role sits close to the systems being secured, so understanding how AI agents and data pipelines actually behave matters more than ever.

How it builds AI experience

The job offers direct exposure to securing LLM architectures, training data pipelines and customer facing AI agents, plus practice researching attacks specific to generative AI. Someone building toward it could start by learning common LLM attack patterns, trying security tooling on AI services and APIs, and getting hands on with automated scanning in CI/CD. Experience using AI agents inside a security workflow would also map well to what the team is asked to do.

Worth showing

• Application security program ownership
• Threat modeling LLM systems
• SAST and DAST in CI/CD
• Automation and developer enablement

This is our own read, written from the employer's posting and the company's Spotlight. The employer's posting is the source of truth for the role.

About Writer

Writer is an enterprise AI platform for building and supervising AI agents grounded in company data, per the company.