security engineer

IT Vikings

<div><div><div>ITVikings</div><div>
Careers</div><div>
Cyber Security, Infosec Engineer</div><div> 
</div></div><div><div><div><div><div><div><div><div><div>Job Description: 
<ul><li>Installation, configuration and maintenance for network Security equipment (Web Security, Mail Security, End point Security, Data Security, etc&hellip;.) for IT Vikings customers.</li><li>Provides remote and on-site support to our customers.</li><li>Performing troubleshooting and root cause analysis on security appliances, Network appliances.</li><li>Prepare and perform Proof-of-Concept (POC) for the customer.</li><li>Understand the customer&rsquo;s technical requirements, business objectives and strategy.</li><li>Deep knowledge to translate customer needs to a solution and designing.</li><li>Develop project documentation.</li></ul>
 
*Requirements*: 
<ul><li>BSc. In Engineering or computer science or information security</li><li>2+ years practical experience working with security solutions services</li><li>Excellent in multiple security solutions and prefer to have knowledge in NGFW , EPP , EDR , NDR,IPS, Email Security, Web Security, WAF,ADC,PAM and IAM&hellip;. etc. (implementation and operation )</li><li>Security &ndash; related certificates are plus</li><li>Strong presentation and communication skills</li><li>Very good in English</li></ul></div> 
&ndash; If interested, you can send your updated resume to jobs@itvikings.com. Please mention the job title in the subject.</div></div></div></div></div></div></div></div></div><div></div>

Information Security Engineer

SAIC

<div>Job ID: 2611293
Location: Springfield, VA, US
Date Posted: 2026-04-09
Category: Information Technology
Subcategory: Network Engineer
Schedule: Full-Time
Shift: Day Job
Travel: No
Minimum Clearance Required: Top_Secret
Clearance Level Must Be Able to Obtain: TS/SCI
Potential for Remote Work: ORA_ON_SITE 
Description
SAIC currently has an opening for a Communications Security Engineer to support the Department of State (DoS) Bureau of Diplomatic Technology. DT provides enterprise architecture design, engineering, operations and maintenance support services for desktops, servers, networks, firewalls, and enterprise applications across the Department.
The Security Engineer shall develop next-generation security solutions to secure the organization&rsquo;s communication fabric. This role engineers the next generation security layers that protect data moving across internal networks, cloud environments, and remote access tunnels. They are the strategic lead in ensuring that every network handshake&mdash;whether via TLS, IPsec, or SSH&mdash;is backed by a robust and resilient cybersecurity infrastructure.
Description of Duties:<ul><li>
Secure Connection Management: Oversee the security of network tunnels and data-in-transit protocols. This includes managing the certificates and configurations for VPNs, secure gateways, and encrypted communication channels that link internal networks to external service providers.</li><li>
Lifecycle Automation: Develop and implement automated workflows for the lifecycle of security credentials. This reduces manual intervention, minimizes human error, and ensures timely rotation to meet security standards.</li><li>
Identity &amp; Access Integration: Align access with the organization&rsquo;s identity management framework. Ensure that only authorized systems and personnel can access sensitive keys and that all access is logged and audited according to the principle of least privilege.</li><li>
Security Compliance &amp; Auditing: Monitor and report on the status of encryption and network security controls. Conduct regular reviews to ensure that all hybrid and cloud-based configurations meet organizational security policies and industry regulatory requirements.</li><li>
Vulnerability &amp; Risk Mitigation: Identify and remediate security gaps in the hybrid network infrastructure. This involves assessing the risks associated with data movement between environments and implementing hardening measures to protect against unauthorized access or data leakage.</li><li>
Incident Response Support: Provide subject matter expertise during security incidents involving encryption failures or unauthorized network access. Assist in the rapid revocation and replacement of compromised credentials to restore secure operations.</li></ul>
Qualifications
Required Education &amp; Experience:<ul><li>
Bachelors and nine (9) years or more experience; Masters and seven (7) years or more experience ; may accept additional experience in lieu of degree.</li><li>
Experience with some or all of the following:<ul><li>
KMI &ndash; Key Management Infrastructure</li><li>
iApp</li><li>
EKMS- Electronic Key Management System</li><li>
Key Material</li><li>
OTNK &ndash; Over the Network Key</li><li>
CARDS (COMSEC Accounting, Reporting, and Distribution System)</li></ul></li><li>
Technical Expertise: Deep knowledge of symmetric and asymmetric encryption (e.g., AES, RSA, ECC) and Public Key Infrastructure (PKI) and Post Quantum Encryption.</li><li>
Proven experience managing security in a multi-environment IT infrastructure (e.g., mixing local servers with cloud services).</li><li>
Understanding of core network transport security concepts (symmetric vs. asymmetric encryption, hashing, and digital signatures) and network security protocols (TLS/SSL, IPsec, SSH).</li><li>
Ability to troubleshoot complex connectivity and encryption issues across different technical platforms.</li><li>
Skill in documenting technical procedures and explaining security risks to both technical teams and management.</li><li>
Familiarity with handling classified or confidential materials.</li></ul>
Required Clearance:<ul><li>
US Citizenship.</li><li>
Active top secret with the ability to obtain TS/SCI.</li></ul>
Desired Experience/Skills/Attributes:<ul><li>
Familiarity with DoS environment (data and voice networks, IT security systems, policies and procedures), Foreign Affairs Handbooks (FAHs), Foreign Affairs Manuals (FAMs) preferred.</li><li>
Interpersonal skills including the ability to collaborate effectively, self-awareness, and excellent written and oral communications.</li><li>
Previous COMSEC experience.</li></ul></div>

Communication Security Engineer

BV Teck

<div>Bright Vision Technologies is a forward-thinking software development company dedicated to building innovative solutions that help businesses automate and optimize their operations. We leverage cutting-edge technologies to create scalable, secure, and user-friendly applications. 
 
As we continue to grow, we&rsquo;re looking for a skilled AI Security Engineer to join our dynamic team and contribute to our mission of transforming business processes through technology. 
 
This is a fantastic opportunity to join an established and well-respected organization offering tremendous career growth potential. 
 
AI Security Engineer 
Job Title: AI Security Engineer 
Location: 100% Remote (Continental United States) 
Position Type: In-house Bright Vision Technologies SOW engagement (no third-party client or vendor) 
Experience: 6+ years 
Sponsorship: No new H1B sponsorship available. H1B transfers welcomed for qualified candidates. 
Employment Type: Full-time, direct W2 with Bright Vision Technologies (no C2C, no 1099, no third-party) 
Engagement: Long-term, multi-year, aligned to the Bright Vision SOW delivery roadmap 
Compensation: Competitive base salary commensurate with experience, plus benefits. 
Employment Terms &amp; Visa Policy 
This is a 100% remote, full-time, direct W2 position with Bright Vision Technologies. 
This role is part of Bright Vision Technologies&rsquo; in-house Statement of Work (SOW) engagement. The client, end customer, and employer for this position is Bright Vision Technologies &mdash; there is no third-party client, vendor, or implementation partner involved. 
We do not engage in C2C, 1099, or third-party arrangements for this role. 
BUT STRICTLY NO C2C/1099/3RD PARTY COMPANIES. ALL OUR ROLES ARE W2 AND NO 3RD PARTY BROKERING PLEASE. 
Candidates must be willing to work directly as a full-time W2 employee of Bright Vision Technologies and contribute to our in-house SOW deliverables. 
No new H1B sponsorship is available for this role. 
However, candidates who are currently on a valid H1B visa and require a transfer are welcome to apply. We will support H1B transfers for qualified candidates. 
For every role, a technical coding assessment is mandatory. Please apply only if you are confident in your technical abilities and hands-on experience. 
Job Summary 
We are seeking an AI Security Engineer to lead the design and implementation of security controls, threat models, and incident response capabilities specifically tailored to AI and machine learning systems. The role addresses the unique security challenges posed by LLMs, model APIs, training data pipelines, and AI-powered applications, including prompt injection, model abuse, data exfiltration, and supply chain risks. The ideal candidate has strong security engineering fundamentals and a deep understanding of how modern AI systems work in practice, with hands-on experience designing defenses for both AI-powered applications and the AI infrastructure that supports them. 
Key Responsibilities<ul><li>
Define and implement security controls specifically targeting LLM and AI-powered application risks.</li><li>
Build threat models for AI systems, including prompt injection, jailbreaks, data exfiltration, and abuse patterns.</li><li>
Design and deploy guardrails, content filters, and policy enforcement layers around model endpoints.</li><li>
Implement runtime detection and response capabilities for adversarial prompts and abusive behavior.</li><li>
Secure training and fine-tuning pipelines, including data provenance, integrity, and access controls.</li><li>
Design controls for sensitive data handling, retention, and redaction in LLM workflows.</li><li>
Lead red-team exercises against AI systems and drive remediation of identified weaknesses.</li><li>
Evaluate and harden third-party AI services and open-source AI components used internally.</li><li>
Implement identity, authorization, and tenant-isolation patterns for multi-tenant AI services.</li><li>
Drive supply chain security for ML artifacts including weights, datasets, and inference dependencies.</li><li>
Collaborate with privacy, legal, and compliance teams to ensure AI systems meet regulatory obligations.</li><li>
Develop monitoring, logging, and detection strategies tailored to AI workloads.</li><li>
Lead incident response for AI-specific security events and drive durable improvements.</li><li>
Stay current with adversarial ML, LLM security research, and emerging regulatory developments.</li></ul>
Required Qualifications<ul><li>
Bachelor&rsquo;s or Master&rsquo;s degree in Computer Science, Cybersecurity, or a related discipline.</li><li>
Six or more years of security engineering experience, including significant work on AI or ML systems.</li><li>
Strong understanding of LLM internals, modern AI architectures, and common failure modes.</li><li>
Hands-on experience designing security controls for AI-powered applications.</li><li>
Deep knowledge of application security, identity, and cryptography fundamentals.</li><li>
Experience with threat modeling and security architecture review processes.</li><li>
Familiarity with adversarial ML, prompt injection, and model abuse research.</li><li>
Proficiency in Python and at least one systems language.</li><li>
Strong understanding of cloud security and modern infrastructure controls.</li><li>
Excellent written and verbal communication skills.</li></ul>
Preferred Qualifications<ul><li>
Publications, talks, or CTF participation in AI security topics.</li><li>
Experience with red-teaming LLM-based products.</li><li>
Familiarity with privacy-preserving ML techniques such as differential privacy.</li><li>
Exposure to regulated industries with strict data handling requirements.</li><li>
Open-source contributions to AI security tooling.</li></ul>
How to Apply 
Would you like to know more about this opportunity? 
For immediate consideration, please send your resume to venkat.r@bvteck.com or contact us at (908) 505-3899. Learn more about Bright Vision Technologies at www.bvteck.com. 
We recognize that our people are our strength, and the diverse talents they bring to our global workforce are directly linked to our success. We are an equal opportunity employer and place a high value on diversity and inclusion at our company. 
We do not discriminate on the basis of any protected attribute, including race, religion, color, national origin, gender, sexual orientation, gender identity, gender expression, age, marital or veteran status, pregnancy or disability, or any other basis protected under applicable law. We also make reasonable accommodations for applicants&rsquo; and employees&rsquo; religious practices and beliefs, as well as mental health or physical disability needs. 
Bright Vision Technologies is an Equal Opportunity Employer, including Disability/Veterans. 
Position offered by &ldquo;No Fee Agency.&rdquo; 
Equal Employment Opportunity (EEO) Statement
Bright Vision Technologies (BV Teck) is committed to equal employment opportunity (EEO) for all employees and applicants without regard to race, color, religion, sex, sexual orientation, gender identity or expression, national origin, age, genetic information, disability, veteran status, or any other protected status as defined by applicable federal, state, or local laws. This commitment extends to all aspects of employment, including recruitment, hiring, training, compensation, promotion, transfer, leaves of absence, termination, layoffs, and recall.
BV Teck expressly prohibits any form of workplace harassment or discrimination. Any improper interference with employees' ability to perform their job duties may result in disciplinary action up to and including termination of employment.
uKVP56qi8U</div>

AI Security Engineer

HND Endustriyel

SYSTEM SECURITY PROTOCOL // HND ENDUSTRIYEL SECTOR: Shuaiba, East Port DESIGNATION: Systems Security Engineer BUDGETARY LINE: KWD 1,150 MonthlyTHE SECURITY MANDATEOperating out of the East Port facility in Shuaiba, you are the primary architect of our defensive posture. HND Endustriyel requires an engineer who treats security as a living system, not a static barrier. Your objective is the total hardening of our industrial IT infrastructure against external and internal vulnerabilities.CORE DEFENSE VECTORS<ul><li>Infrastructure Hardening: Implement and audit robust security frameworks across all port-side servers and network endpoints to ensure zero-compromise operations.</li><li>Threat Surface Analysis: Conduct continuous vulnerability assessments and penetration testing to identify and remediate potential logic flaws in our industrial software stack.</li><li>Access Governance: Manage the high-integrity deployment of multi-factor authentication and identity management protocols to secure critical data flows within the facility.</li><li>Incident Response Orchestration: Develop and maintain the technical &quot;Red-Book&quot; for rapid recovery, ensuring that any system breach is contained and neutralized with minimal downtime.</li></ul>THE OPERATIVE&rsquo;S DATA<ul><li>Professional Tenure: 5+ years specializing in systems security, ideally within an industrial or maritime environment.</li><li>Linguistic Mastery: C2 English proficiency is mandatory for technical documentation and coordinating with international cybersecurity vendors.</li><li>Asynchronous Auditing: You are required to use Loom to record &quot;Security Posture Briefs&quot; and logic walkthroughs, providing the executive team with a clear, visual understanding of our defensive status.</li></ul>FACILITY TERMSSecure a critical role at the center of the Shuaiba East Port operations. This position provides a monthly salary of KWD 1,150 for a professional dedicated to the technical integrity of HND Endustriyel.نوع الوظيفة: دوام كاملالراتب المدفوع: KWD١٬٤٠٠٫٠٠٠&nbsp;لكل شهرموقع العمل: بشكل شخصي

Systems Security Engineer

Coca-Cola HBC

<div>
 
 
 Department:
 
 Cyber Security &amp; Data Privacy Platform
 
 
 
 Location:
 
 Egypt, Greece, Bulgaria
 
 
 
 
 
 We are seeking a skilled and motivated
 
 Endpoint Security Engineer
 
 with expertise in administering Email Antispam and EDR solutions to join our cybersecurity team. In this role, you will be responsible for designing, implementing, and managing our email security and endpoint protection solutions. Your knowledge of Proofpoint's antispam capabilities and Microsoft Defender's advanced endpoint protection features will be crucial in safeguarding our organization against email-borne threats and endpoint vulnerabilities. The position will be reported directly to the Product Manager responsible for Endpoint Security.
 
 
 
 
 
 
 YOUR NEW KEY RESPONSIBILITIES:
 
 
 
 &bull; Design, deploy, and manage our company antispam solution to ensure effective filtering of inbound and outbound emails, blocking spam, phishing attempts, and malicious attachments.
 
 
 &bull; Configure policies for content filtering, URL categorization, and email encryption.
 
 
 &bull; Day to day configuration support and administration.
 
 
 &bull; Implement and manage EDR to provide advanced protection against malware, ransomware, and other endpoint vulnerabilities.
 
 
 &bull; Utilize threat intelligence and behavior-based analytics to detect and respond to security threats across endpoints.
 
 
 &bull; Develop and enforce email security and endpoint protection policies aligned with industry best practices and organizational requirements.
 
 
 &bull; Configure detection rules, custom policies, and security baselines for endpoints.
 
 
 &bull; Optimize Antispam and EDR configurations for accurate threat detection and minimal false positives.
 
 
 &bull; Maintain relationships with Proofpoint and Microsoft representatives, staying updated about product updates, patches, and security enhancements.
 
 
 &bull; Employee Training and Awareness.
 
 
 &bull; Ability to work as on call: It will be required to participate to the team&rsquo;s on call shift one week per month.
 
 
 
 
 
 
 ARE THESE YOUR SECRET INGREDIENTS?
 
 
 
 &bull; Bachelor&rsquo;s degree in computer science, Information Security, or related field (or equivalent experience).
 
 
 &bull; 5 years of proven experience as an Engineer with expertise in Antispam and EDR solutions.
 
 
 &bull; Experience with Proofpoint or Microsoft Defender for Endpoint will be considered as a plus.
 
 
 &bull; Experience with Privileged access management systems or network security tools will be considered as a plus.
 
 
 &bull; Strong understanding of email security protocols, antispam mechanisms, and endpoint protection concepts.
 
 
 &bull; Experience with email threat analysis, malware detection, and endpoint vulnerability assessment.
 
 
 &bull; Familiarity with email authentication mechanisms (SPF, DKIM, DMARC) and endpoint detection and response (EDR) tools.
 
 
 &bull; Excellent problem-solving skills and the ability to respond to security incidents promptly.
 
 
 &bull; Strong communication skills to collaborate with technical and non-technical stakeholders.
 
 
 &bull; English proficiency is a MUST
 
 
 
 
 
 
 BENEFITS:
 
 
 
 &bull; Competitive compensation and comprehensive benefits package.
 
 
 &bull; Opportunity to work with cutting-edge email security and endpoint protection technologies.
 
 
 &bull; Collaborative and innovative work environment.
 
 
 &bull; Continuous learning and professional development opportunities.
 
 
 &bull; Contribution to enhancing the organization's email and endpoint security posture.
 
 
 
 
 
 
 ABOUT YOUR NEW TEAM:
 
 
 
 We are Coca-Cola Hellenic, a growth-focused consumer goods business and strategic bottling partner of the Coca-Cola Company. We bottle, distribute and sell an unrivalled range of products in 29 markets in Europe, Africa and Eurasia. As we do, we create value for all stakeholders, support socio-economic growth and build a more positive environmental impact.
 
 
 We bring together more than 30,000 people from over 70 nationalities, coming from five continents. The diversity of our markets, from mature to emerging economies, provides a wide range of attractive opportunities for growth.
 
 
 We nurture our talents. We give opportunities to people across all functions and levels, as well as different geographies, backgrounds and education. We are willing to take a risk on the people we believe in, even if they don&rsquo;t have the perfect experience. We have faith in what every person can be. And although we have so much to be proud of, we always stay humble. We believe the real magic happens &ndash; for us and for you &ndash; when we OPEN UP.
 
 
 
 
 
 
 AT COCA-COLA HBC, DIVERSITY HELPS US THRIVE
 
 
 
 At Coca-Cola HBC, we are an inclusive employer that thrives on diversity. This means our environment provides equal opportunities for all, regardless of race, color, religion, age, disability, sexual orientation, or gender identity. Join us in nurturing a culture where everyone belongs and contributes to our collective success.
 
</div>

Endpoint Security Engineer

VIDIZMO LLC

<div>We&rsquo;re looking for a passionate professional to strengthen our secure software development lifecycle (SDLC) and integrate security best practices into every stage of development. The ideal candidate will have hands-on experience in DevSecOps, secure coding, and vulnerability management &mdash; with VAPT skills being a plus. 
VIDIZMO is a USA-based technology company headquartered in Tysons, Virginia, and a Microsoft Solutions Partner in Data &amp; AI, Infrastructure, and Digital &amp; App Innovation. Offering a AI-Powered Intelligence Hub, we empower Fortune 500 companies, large enterprises, governments, and the public sector to securely manage, analyze, and govern their data with complete control and compliance. 
Our Multimodal AI Data Intelligence Platform leverages Large Language Models (LLMs) and RAG (Retrieval-Augmented Generation) to deliver powerful capabilities such as auto-tagging, redaction, content summarization, OCR, translation, subtitle creation, object detection and tracking, content search, sentiment and emotion analysis, topic extraction, document classification, and facial attribute detection. 
AI Output Verification &amp; Accountability (Required Competency) 
The candidate must be capable of effectively using AI tools (e.g., Claude, ChatGPT, Copilot, or similar) to support work outputs such as content, analysis, documentation, or code. However, the candidate must also demonstrate strong judgment and ownership of the final deliverables. AI-generated output must never be treated as final without review. The candidate is expected to validate accuracy, completeness, logic, compliance, and alignment with business requirements, and refine AI-assisted work to meet the expected quality standards. The individual will be held accountable for the final output, regardless of whether AI tools were used during execution. 
Responsibilities:
<ul>
<li>Perform in-depth vulnerability assessments and penetration tests on systems, networks, and applications to uncover security weaknesses and potential threats.</li>
<li>Responsibility for reviewing and validating AI-generated outputs</li>
<li>Ownership of final deliverables, regardless of AI assistance</li>
<li>Ability to critically evaluate AI results and ensure they meet defined requirements</li>
<li>Accountability for accuracy, quality, and compliance</li>
<li>Utilize a variety of industry-standard tools and methodologies, including Nessus, Nmap, Metasploit, Burp Suite, and others, for both automated and manual testing.</li>
<li>Analyze assessment results meticulously, creating detailed reports outlining identified vulnerabilities, associated risks, and recommended remediation strategies.</li>
<li>Collaborate with cross-functional teams to prioritize and address discovered vulnerabilities based on their severity and potential impact on our organization.</li>
<li>Stay updated on the latest security threats, vulnerabilities, and best practices in cybersecurity.</li>
<li>Participate in red team exercises to simulate real-world cyber attacks, evaluating defensive measures and incident response capabilities.</li>
<li>Contribute to the development and improvement of security policies, procedures, and guidelines based on assessment findings and industry standards.</li>
<li>Provide mentorship and support to junior team members, including training on security assessment methodologies and tools.</li></ul> 


Requirements:
<ul>
<li>Hold a Bachelor&rsquo;s degree in Computer Science, Information Security, or a related field 
</li>
<li>Possess a solid understanding of common security vulnerabilities, attack vectors, and exploitation techniques.</li>
<li>Have hands-on experience with security testing tools such as Nessus, Nmap, Metasploit, Burp Suite, etc.</li>
<li>Familiarity with various operating systems, networking protocols, and web technologies is essential.</li>
<li>Showcase exceptional analytical and problem-solving skills with great attention to detail.</li>
<li>Communicate effectively, both verbally and in writing, with the ability to explain technical findings and recommendations clearly to diverse audiences.</li>
<li>Preferred certifications include CEH (Certified Ethical Hacker), OSCP (Offensive Security Certified Professional), or equivalent.</li>
<li>The ideal candidate demonstrates strong business acumen, translates objectives into impactful solutions, and effectively leverages AI tools for efficiency. Proficiency in Claude (mandatory) and familiarity with tools such as ChatGPT are required. An ownership mindset and the ability to deliver results independently are essential. Successful completion of a Claude-based assessment is required as part of the hiring process.</li> 
</ul>
Benefits: Health Insurance (OPD/IPD), Separate Maternity Cover, Leave encashment, Car Support Program, Referral Bonus, EOBI, Bi-Annual Increment. Provident Fund, Career Growth, Bonus (benefits vary based on location) 
Multiple Locations: Pakistan, India, UAE, Australia &amp; USA.</div>

Security Engineer

PackageX

<div>
 
 About PackageX
 
 :
 
 
 PackageX is the execution layer for physical AI in enterprise logistics. We enable enterprises to see, understand, and execute real-world logistics operations in real time using Vision-Language-Action intelligence.
 
 
 We sit between systems of record (ERP, WMS, TMS) and the physical world, turning cameras, people, and automation into deterministic, auditable workflows. Rather than replacing existing systems, PackageX makes them operationally intelligent.
 
 
 We start with inbound receiving, the highest-friction choke point in logistics, and expand across adjacent workflows, sites, and automation modes. This creates a workflow-led enterprise expansion motion that compounds inside complex operations.
 
 
 We're a fast-growing pre-Series A stage startup in New York City with a distributed global team backed by Bullpen Capital, Pritzker Group, Sierra Ventures, Ludlow Ventures, MXV Capital, and NSV Wolf Capital.
 
 
 
 What We Are Looking For
 
 
 
 We&rsquo;re looking for a security engineer who is serious about their craft and genuinely curious about where the field is heading. This role sits at the intersection of traditional application security and the new challenges that come with building AI-powered products. You&rsquo;ll own security end-to-end, from hardening our cloud infrastructure and reviewing code, to thinking through what it means to secure systems that use large language models. You don&rsquo;t need to have done this exact job before, but you should be the kind of engineer who stays curious, learns fast, and cares deeply about getting things right.
 
 
 
 You will:
 
 
 
 <ul>
 <li>
 Own security across the SDLC from threat modeling during design, to security reviews during development, to vulnerability scanning in CI/CD. You&rsquo;ll use modern tooling (including AI-powered scanners where they genuinely help) to keep pace with a fast-moving engineering team
 </li>
 <li>
 Conduct vulnerability assessments and penetration tests across our web applications, APIs, and infrastructure. You&rsquo;ll identify issues before attackers do, document findings clearly, and work directly with developers to get them fixed
 </li>
 <li>
 Write and maintain security policies that engineers will actually follow, clear, practical, and grounded in how the team actually works, not copied from a compliance template
 </li>
 <li>
 Think carefully about the security risks that come with AI-powered products, such as prompt injection, sensitive data leaking through model outputs, and how to keep our LLM integrations safe for customers. This is a newer area, and you&rsquo;ll be helping us figure it out as we go
 </li>
 <li>
 Report on security posture to engineering leadership, tracking gaps, trends, and open issues in a way that helps the team prioritize and act, not just tick compliance boxes
 </li>
 <li>
 Review code for security issues and work closely with developers to fix them, building habits and processes so security feedback becomes a normal part of how the team ships, not a last-minute blocker
 </li>
 <li>
 Define and maintain security standards for how we build and deploy software, writing clear guidelines, putting automated checks in place, and making it easy for engineers to do the right thing by default
 </li>
 <li>
 Build automation that makes security work scale &mdash; whether that&rsquo;s smarter alerting, faster triage, or tooling that helps developers catch and fix issues without needing a security engineer in every conversation
 </li>
 <li>
 Participate in product and engineering design discussions &mdash; raising security concerns early, helping the team understand the risks, and finding solutions that don&rsquo;t slow down shipping
 </li>
 <li>
 Embed security into our CI/CD pipelines and development workflows &mdash; reducing the time between finding a vulnerability and getting it fixed, and making security a shared responsibility across the engineering team
 </li>
 <li>
 Keep up with how the security landscape is evolving &mdash; particularly as AI becomes a bigger part of how software is built and attacked. You&rsquo;ll bring that knowledge back to the team and help us stay ahead of new threats
 
 
 
 </li>
 </ul>
 
 Skills and Qualification:
 
 
 
 <ul>
 <li>
 A degree in Computer Science, Information Security, or a related field
 </li>
 <li>
 3+ years of hands-on experience in application security or security engineering.
 </li>
 <li>
 Proven ability to build, manage, and monitor security in production environments where reliability matters &mdash; you&rsquo;ve operated under pressure, handled incidents, and know what it takes to keep systems safe at scale
 </li>
 <li>
 Solid experience securing web applications, APIs, and cloud infrastructure &mdash; covering areas like intrusion detection, access control design, incident response, and security policy development. You know the fundamentals well and can apply them in a real product context
 </li>
 <li>
 Experience with static and dynamic code analysis, you&rsquo;ve worked with SAST and DAST tools, know their limitations, and can help developers actually act on what those tools surface rather than just generating noise
 </li>
 <li>
 Familiarity with modern cloud architectures, serverless, microservices, and API-first designs. Bonus if you&rsquo;ve thought about what it means to secure systems that call LLM APIs or handle AI-generated outputs as part of their core workflow
 </li>
 <li>
 Strong understanding of OWASP Top 10 vulnerabilities and how to defend against them. Familiarity with the OWASP Top 10 for LLMs is a plus; we&rsquo;re building AI-powered products and need someone who can think through what that means for security
 </li>
 <li>
 Good understanding of RESTful API security, authentication, authorization, rate limiting, and input validation. Our platform is API-heavy, and we need someone who can spot the common mistakes and knows how to prevent them
 </li>
 <li>
 Strong experience in penetration testing and vulnerability analysis. You can run an assessment end-to-end, write up findings that people actually read, and follow through until issues are resolved &mdash; not just hand over a report and move on
 </li>
 <li>
 Experience working with AWS and/or GCP, securing cloud infrastructure, managing IAM policies, and understanding how cloud-native services introduce their own security considerations. We run primarily on AWS
 
 
 
 </li>
 </ul>
 
 What can you expect from the application process?
 
 
 
 All applications will be looked at by the People team, who will reach out to shortlisted candidates. Across various interview rounds, you'll speak with the hiring manager and other functional heads. We want to have an open discussion about your work and how we can be a great fit. The process may also involve an assessment or presentation relevant to the role. You can expect an offer after three rounds of interviews. All offers are subject to satisfactory reference and background checks.
 
 
 We may use artificial intelligence (AI) tools to support parts of the hiring process, such as reviewing applications, analyzing resumes, or assessing responses. These tools assist our recruitment team but do not replace human judgment. Final hiring decisions are ultimately made by humans. If you would like more information about how your data is processed, please contact us.
</div>

Application Security Engineer

Search 8095+ Security engineer jobs near you this May. New roles added regularly across leading industries. Apply today.