Application Security Engineer II

Overview

Application Security Engineer II (individual contributor) to secure AI-powered and cloud-native applications on an AWS-based platform.

What you'll do

• Lead threat modeling and security architecture reviews with engineering teams for AI-powered features.
• Architect, build, and maintain security tooling and integrations for CI/CD pipelines.
• Design and deploy automated security testing to find vulnerabilities early.
• Contribute during security incidents by analyzing application-level behavior and improving response.
• Coach developers on secure coding, security architecture, and threat modeling for AI-native systems.
• Define and track security posture metrics using dashboards or reports.

What you'll need

• 5+ years of experience in application security engineering roles.
• Experience securing AWS or comparable cloud-native environments with modern development practices.
• Experience securing AI/ML-powered systems or ability to ramp on prompt injection, model supply chain, and agentic-workflow risks.
• Strong programming skills in Python, Go, Java, or JavaScript/TypeScript.
• Web application security expertise including OWASP Top 10, authentication/authorization, cryptography, and secure API design.
• Hands-on experience threat modeling and running security architecture reviews.

Details

• Work location: Remote - USA.