Назад
Company hidden
7 дней назад

Senior Application Security Engineer (AI/ML)

232 000 - 379 000$
Формат работы
remote (только USA)
Тип работы
fulltime
Грейд
senior
Английский
b2
Страна
US
Вакансия из списка Hirify.GlobalВакансия из Hirify Global, списка международных tech-компаний
Для мэтча и отклика нужен Plus

Мэтч & Сопровод

Для мэтча с этой вакансией нужен Plus

Описание вакансии

Текст:
/
TL;DR
Senior Application Security Engineer (AI/ML): Building security into web, backend, and API development lifecycles with an accent on AI/ML security, threat modeling, and automated security tooling. Focus on integrating SAST, SCA, and DAST into CI/CD, reviewing complex codebases, remediating vulnerabilities, and strengthening secure development practices.

Location: Remote within the U.S., excluding U.S. territories. Core meeting hours are 9AM–2PM Pacific time. Occasional travel may be requested but is not required.

Salary: $232,000–$379,000 per year.

Company

hirify.global is an insurance technology innovation company backed and wholly owned by State Farm, developing risk prediction, prevention, acquisition, and digital insurance platform solutions.

What you will do

  • Partner with web and backend engineering teams to manage product security across the software development lifecycle.
  • Lead security design reviews and threat modeling for APIs, web features, and service integrations.
  • Integrate SAST, SCA, and DAST tooling into CI/CD pipelines and developer workflows.
  • Review source code and deployment configurations, then coordinate vulnerability triage, remediation, and validation.
  • Develop AppSec automation and integrations, including ASVS scanning and Burp Suite Enterprise, using AI/ML where appropriate.
  • Support SaaS security assessments, open-source reviews, secure development enablement, and incident response planning.

Requirements

  • Bachelor’s degree or equivalent relevant experience.
  • 6–8 years of experience in application security or full-stack development with security expertise.
  • Strong secure coding knowledge in Python, JavaScript/TypeScript, Node.js, and web standards.
  • Understanding of OWASP Top 10, GenAI/LLM risks, API security, SSRF, and related application vulnerabilities.
  • Experience with CodeQL, Wiz, SonarQube, Snyk, or comparable code-scanning tools.
  • Ability to read and debug complex codebases and communicate security guidance to engineers at all levels.

Nice to have

  • GraphQL security experience.
  • Participation in security champions programs or secure SDLC rollouts.
  • Contributions to open-source security tooling.
  • Infrastructure-as-code, container security, or AI/ML automation experience.

Culture & Benefits

  • Remote-first work environment for most positions, with optional access to offices in the San Francisco Bay Area and Providence, Rhode Island.
  • Medical, dental, vision, life insurance, supplemental income plans, and a 401(k) with company match.
  • $2,000 one-time allowance for home office equipment and a provisioned MacBook Pro.
  • Four weeks of PTO in the first year and twelve weeks of fully paid parental leave.
  • Up to $5,000 annually for professional development, plus LinkedIn Learning and coaching access.

Будьте осторожны: если работодатель просит войти в их систему, используя iCloud/Google, прислать код/пароль, запустить код/ПО, не делайте этого - это мошенники. Обязательно жмите "Пожаловаться" или пишите в поддержку. Подробнее в гайде →