Application Security Engineer, Generative AI

This is a fully remote position, open to applicants in United States, +18 more locations.

📋 Description

• Develop secure software development standards and incorporate security into engineering design and development processes.

• Establish self-service pathways for engineering teams through well-documented review workflows, reusable tools, and secure design patterns.

• Conduct design and code reviews, threat modeling, and security assessments for GenAI, Creative GenAI, and emerging business initiatives.

• Design and evaluate sandboxing and isolation strategies.

• Collaborate with stakeholders to foster a culture of security-focused builders.

• Analyze security issues, prioritize vulnerabilities by risk level, and manage timely remediation and verification efforts.

• Evaluate vendors and AI tools for security controls and ensure safe employee utilization.

• Participate in the security team's on-call and incident-response rotation.

• Carry out blameless post-incident reviews, document findings, and ensure follow-through on remediation actions.

• Develop maintainable security tools and automation, including a pilot for AI-assisted code-security triage.

• Collaborate with Detection & Response teams on detection enhancements and response strategies.

• Contribute to application, cloud, and infrastructure security efforts, including Accelerate and MX.

⛳️ Requirements

• Over 5 years of pertinent experience in security engineering or software engineering.

• Strong judgment in prioritizing security initiatives using a risk-based methodology.

• Proven experience collaborating with cross-functional teams to implement security improvements and assist engineers in selecting practical solutions.

• Capability to write production-quality code for security tools and automation, review pull requests, and navigate extensive, unfamiliar codebases.

• Deep understanding of secure software design, application and API security, authentication and authorization, threat modeling, and code review processes.

• Experience in assessing cloud and infrastructure security, contributing beyond a primary focus on application security.

• Ability to swiftly comprehend complex engineering systems and architectures.

• Practical software engineering habits, including testing, observability, version control, peer code review, continuous integration, and conducting blameless postmortems.

• Strong technical writing capabilities for design documents, proposals, runbooks, and post-incident reviews.

• Proficiency in articulating security risks and trade-offs clearly both in writing and verbally.

• Willingness to share on-call and incident-response duties, including occasional responses outside of regular hours.

• Experience with Go, Python, Clojure, or JavaScript.

• Background in securing GenAI applications, designing sandboxes, or evaluating AI-assisted security tools and their outputs.

• Experience in scaling cloud security or working with high-velocity software engineering teams, mobile advertising, or high-volume SaaS environments.

🏝️ Benefits

• Bonus

• Equity

• Medical coverage

• Wellness stipends

• Additional perks based on country of residence

• Opportunities for in-person team gatherings, including project meetings, regional meetups, and company-wide events

• Remote-first work environment

• High visibility and impact

• Diverse and challenging projects

• Security-conscious engineering culture

• Hands-on technical work