4 дня назад
Application Security Engineer (AI)
Вакансия из Hirify Global, списка международных tech-компанийДля мэтча и отклика нужен Plus
Мэтч & Сопровод
Для мэтча с этой вакансией нужен Plus
Описание вакансии
Текст:
TL;DR
Application Security Engineer (AI): Securing internal applications, services, and AI-enabled tools through threat modelling, architecture reviews, vulnerability management, and secure SDLC practices with an accent on secure design, application testing, and AI tooling. Focus on integrating security checks into CI/CD, managing penetration testing and remediation, translating compliance requirements into technical controls, and supporting incident response.
Location: London, UK — hybrid, full time; travel required
Company
provides software governance capabilities that help enterprises build, run, and govern software factories securely and efficiently.
What you will do
- Conduct application and service architecture reviews, lead threat modelling, identify design flaws, and define security requirements.
- Manage penetration testing engagements from scoping through remediation, use SAST/DAST and vulnerability scanning tools, and perform secure code reviews.
- Build secure SDLC standards, reference architectures, and reusable security patterns; integrate security checks into CI/CD.
- Advise on the safe adoption of AI coding tools, agentic systems, and non-human identities.
- Translate SOC 2, ISO 27001, and other compliance requirements into technical controls and support application security incident response.
- Partner with the CISO, Security, engineering, and business teams to explain technical risk and coach teams on secure development.
Requirements
- Solid experience in a security-focused engineering role combining technical strategy with hands-on implementation.
- Deep experience in threat modelling, architectural security reviews, application and infrastructure vulnerabilities, and OWASP Top 10.
- Strong understanding of incident response and Zero Trust architecture principles.
- Experience managing penetration testing, remediation, SAST/DAST, and vulnerability management tooling.
- Ability to read and write code in Python, Go, TypeScript, or a similar language.
- Strong communication skills and practical experience integrating security into the SDLC and coaching engineering teams.
Nice to have
- Cloud security experience with AWS or GCP.
- Experience with SOC 2, ISO 27001, or similar compliance frameworks.
- Exposure to AI/ML security or agentic AI frameworks.
- Experience building automation or tooling for security operations.
- Security certifications such as CISSP, CCSP, CISM, or AWS/GCP security specialty.
Culture & Benefits
- Hybrid working arrangement with full-time employment.
- Security is approached through coaching and enablement rather than gatekeeping.
- Adjustments are available to accommodate individual needs in line with applicable equality and disability legislation.
- Equal opportunity employment with a commitment to diversity and inclusion.
Будьте осторожны: если работодатель просит войти в их систему, используя iCloud/Google, прислать код/пароль, запустить код/ПО, не делайте этого - это мошенники. Обязательно жмите "Пожаловаться" или пишите в поддержку. Подробнее в гайде →