Application Security Engineer, Generative AI
New
L
LiftoffMobile advertising
This role is eligible for full-time remote work in one of our entities/states and Canada: CA, CO, ID, IL, FL, GA, MA, MI, MN, MO, NJ, NV, NY, OR, PA, TX, UT, and WA.Full-TimeMiddle
SalarySF Bay Area, Los Angeles/Orange County, NYC, Seattle: $200,000 - $250,000 plus bonus; All other cities and towns in our approved states: $184,000 - $220,000 plus bonus
Apply NowOpens the employer's application page
Job Details
- Experience
- 5+ years of relevant experience in security engineering or software engineering.
- Required Skills
- Go
Requirements
- Have 5+ years of relevant experience in security engineering or software engineering.
- Use a risk-based approach and sound judgment to prioritize security efforts.
- Have experience partnering with cross-functional teams to deliver security improvements and help engineers choose practical fixes.
- Write production-quality code for security tools and automation, review pull requests, and navigate large, unfamiliar codebases.
- Understand secure software design, application and API security, authentication and authorization, threat modeling, and code review.
- Have experience assessing cloud and infrastructure security and contributing beyond a primary application-security specialty.
- Be able to quickly understand complex engineering systems and architecture.
- Apply practical software engineering habits, including testing, observability, version control, peer code review, continuous integration, and blameless postmortems.
- Write design documents, proposals, runbooks, and post-incident reviews that support engineering decisions, and explain security risks and tradeoffs clearly.
- Share the security team's on-call and incident-response responsibilities, including occasional off-hours response.
- Experience with Go, Python, Clojure, or JavaScript is desirable; ability to work across languages matters more than a specific language.
- Experience securing GenAI applications, designing sandboxes, or evaluating AI-assisted security tools and their output is desirable.
Responsibilities
- Establish secure software development standards and integrate security into engineering design and development.
- Create documented review workflows, reusable tools, and secure design patterns that help engineering teams build and deploy securely.
- Perform design and code reviews, threat modeling, and security assessments for GenAI, Creative GenAI, and emerging businesses, including sandbox design and isolation.
- Triage security issues, prioritize vulnerabilities by risk, and work with engineering teams on timely remediation and verification.
- Assess vendors and AI tools to determine whether their security controls and product features support secure employee use.
- Build maintainable security tools and automation, including an AI-assisted code-security triage pilot.
- Share the security team's on-call and incident-response rotation, including occasional off-hours response.
- Conduct blameless post-incident reviews, document findings, and follow through on remediation.
- Partner with Detection & Response to turn application-security findings and threat models into detection improvements and response guidance.
- Contribute across application, cloud, and infrastructure security as priorities change, including support for Accelerate and MX.
View Full Description & ApplyYou'll be redirected to the employer's site
