Application Security Engineer (AI Security)

Location: Hybrid in Redmond, WA, United States, with regular onsite work; fully remote work is not available.

Salary: $108,450–$173,550 USD base pay, plus a potential semi-annual discretionary performance bonus.

Company

hirify.global of America delivers hirify.global entertainment experiences, including video games, hardware systems, films, theme parks, and partner collaborations across the Americas.

What you will do

• Perform security assessments, threat modeling, architecture reviews, and secure code reviews for enterprise applications, APIs, and cloud services.
• Evaluate authentication, authorization, data protection, secrets management, and other application controls; guide and validate remediation with developers.
• Assess AI-enabled applications, including LLMs, RAG systems, agents, connected tools, and MCP integrations, and help mitigate prompt injection, data disclosure, unsafe tool use, and excessive permissions.
• Define AI security review criteria covering data classification, model and vendor risk, data handling, approval conditions, identity, access, logging, and auditability.
• Build security testing into CI/CD and developer workflows, including static and dynamic testing, dependency analysis, secrets detection, and API testing.
• Develop security automation, maintain security solutions, troubleshoot issues, and participate in a 24x7 on-call cycle.

Requirements

• At least five years of related experience in application security, security engineering, software engineering, or a related technical security discipline.
• Experience with application assessments, threat modeling, architecture reviews, secure code reviews, common application vulnerabilities and defenses, and API penetration testing.
• Understanding of web applications, APIs, cloud services, authentication, authorization, secrets management, and data protection, with the ability to read application code.
• Experience with security testing tools, CI/CD pipelines, automated security checks, AWS, microservices, and Kubernetes in multi-team enterprise environments.
• Foundational understanding of generative AI, LLM-enabled applications, and related security risks, or the ability to develop this knowledge quickly.
• Strong communication skills for translating technical risks into clear recommendations for technical and non-technical audiences.
• Undergraduate degree in Computer Science, Cybersecurity, Software Engineering, or a related field, or an equivalent combination of education and experience.
• Applicants must be legally eligible to work in the United States.

Nice to have

• Familiarity with AI risk and governance frameworks, including NIST AI RMF and OWASP guidance for LLM applications.
• Knowledge of prompt injection, data leakage, model or supply chain compromise, and autonomous-agent misuse.
• Practical AI security experience.
• Experience with Python or another scripting language.

Culture & Benefits

• Inclusive and collaborative environment focused on curiosity, thoughtful creativity, open communication, learning, adaptation, and initiative.
• Hybrid work with regular onsite attendance according to the division schedule and guidelines.
• Medical, dental, and vision coverage, 401(k), and paid time off.
• Participation in a 24x7 on-call rotation is required.