Sr. Application Security Engineer (AI)

Location: Hybrid in New York, New York, US

Salary: $190,000–$225,000 per year

Company

hirify.global is hiring for a direct-hire application security engineering role focused on software and AI security.

What you will do

• Review application stacks, identify security gaps, and define, prioritize, track, and drive remediation plans with development teams.
• Perform threat modeling and secure design reviews early in the software development lifecycle.
• Embed security controls, automated testing, and policy enforcement into CI/CD pipelines and agentic delivery workflows.
• Apply OWASP Top 10, OWASP Top 10 for LLM Applications, NIST AI Risk Management Framework, and MITRE ATLAS to assess and manage risk.
• Manage third-party AI red-teaming and application penetration testing engagements, including scope definition, vendor coordination, and remediation.
• Mentor developers and contribute to application and AI security standards, reference architectures, and governance policies.

Requirements

• At least 3 years of application or product security experience and 7 years of cumulative experience across software development and information security.
• Experience securing generative AI and/or agentic AI systems, or current hands-on knowledge of LLM and agentic AI security risks applicable to production environments.
• Deep familiarity with authentication and authorization standards, including OAuth 2.0, OpenID Connect, SAML, and JWT.
• Strong knowledge of secure SDLC practices, developer workflows, DevOps/CI/CD pipelines, modern deployment practices, serverless functions, Kubernetes, and pipeline security.
• Hands-on experience with SAST, DAST, SCA, and manual secure code review.
• Understanding of OWASP Top 10, CWE, CVSS scoring, vulnerability triage, and risk prioritization.
• Practical knowledge of web, API, and cloud application architectures and their security risks.
• Ability to read and understand code in one or more of Python, JavaScript/TypeScript, Java, C#, or Go.
• Strong written and verbal communication, collaboration, influencing, attention to detail, and risk-based judgment.

Nice to have

• Bachelor’s degree or higher in Computer Science, Information/Cyber Security, or a related field, or equivalent experience.
• Experience with AI agent frameworks, the Model Context Protocol, AI red-teaming, adversarial testing, AI security guardrails, or evaluation pipelines.
• Relevant certifications such as CSSLP, GIAC GWAPT, OffSec OSWE, CISSP, or an AI security certification.
• Experience securing AWS, Azure, or GCP environments, infrastructure-as-code, and CI/CD platforms such as GitHub Actions, GitLab CI, or Jenkins.
• Experience with GitHub Advanced Security, NIST SSDF, OWASP SAMM, SLSA, software supply chain security, regulated industries, or developer mentoring programs.

Culture & Benefits

• Direct-hire employment.
• Hybrid work model based in New York, New York.
• Role involves collaboration with engineering teams and leadership without direct authority.