Назад
Company hidden
2 часа назад

Senior Application Security Engineer (AI)

190 100 - 237 600$
Формат работы
remote (только USA)
Тип работы
fulltime
Грейд
senior
Английский
b2
Страна
US
Вакансия из списка Hirify.GlobalВакансия из Hirify Global, списка международных tech-компаний
Для мэтча и отклика нужен Plus

Мэтч & Сопровод

Для мэтча с этой вакансией нужен Plus

Описание вакансии

Текст:
/
TL;DR
Senior Application Security Engineer (AI): Strengthening the secure software development lifecycle and reducing application risk across SaaS products, platform systems, and AI-powered features with an accent on threat modeling, deep code review, vulnerability remediation, and AppSec automation. Focus on validating exploit-resistant fixes, securing AI APIs and workflows, and building tooling that improves security signal quality and developer enablement.

Location: Remote, United States

Annual salary: $190,100–$237,600 for Tier 2 US locations; $218,600–$273,200 for San Francisco, New York City, and Seattle.

Company

hirify.global provides a SaaS go-to-market platform with verified B2B contact data and sales engagement tools used by companies worldwide.

What you will do

  • Own and continuously improve the secure software development lifecycle across product, platform, and AI-powered features.
  • Perform application security reviews, threat modeling, deep code analysis, and security architecture guidance before product launches.
  • Manage vulnerabilities from bug bounty programs, penetration tests, internal reviews, and automated tooling through validation, prioritization, remediation, and verification.
  • Conduct hands-on offensive testing, exploit development, bypass testing, and red-team-style validation of applications and fixes.
  • Configure AppSec tooling, build automation, and use AI-assisted workflows to improve coverage, reduce manual effort, and increase signal quality.
  • Enable engineering teams through secure coding guidance, documentation, training, metrics, and collaboration with Product, Platform, Data, Legal, and Security.

Requirements

  • 5+ years of software engineering or application security experience with meaningful hands-on AppSec experience in modern SaaS environments.
  • Ability to read, write, and ship production code; Ruby experience is highly valuable, with Python or similar scripting experience useful.
  • Strong Linux and cloud fundamentals, ideally in GCP-backed environments.
  • Deep knowledge of secure design, authentication and authorization, vulnerability management, developer security tooling, and common application security risks.
  • Experience with deep code review, penetration testing, exploit-oriented validation, and durable vulnerability remediation.
  • Experience securing AI-powered systems, including AI API exposure, prompt and response handling, data protection, misuse scenarios, and monitoring.

Nice to have

  • Experience supporting security reviews for AI-native products, internal agents, or AI-assisted engineering workflows.
  • Experience improving secure-by-design practices and AppSec observability in a fast-moving engineering organization.
  • Security training, developer enablement, or security champions experience.
  • Relevant security certifications.

Culture & Benefits

  • AI-native environment focused on continuous improvement, automation, and productivity.
  • Equity and company bonus opportunities.
  • 401(k), medical, dental, vision, FSA/HSA, life and disability insurance.
  • At least 10 paid holidays, flexible PTO, parental leave, employee assistance, and wellbeing benefits.
  • Global travel coverage and support for professional growth.

Будьте осторожны: если работодатель просит войти в их систему, используя iCloud/Google, прислать код/пароль, запустить код/ПО, не делайте этого - это мошенники. Обязательно жмите "Пожаловаться" или пишите в поддержку. Подробнее в гайде →