Application Security Engineer 3 (AI)

Location: Arlington, Virginia, United States — 1801 S Bell (INDG)

Salary: $155,000–$185,000 per year

Company

hirify.global provides internal and external applications supported by an Application Security team focused on protecting them against modern threats.

What you will do

• Lead application security engineering initiatives and design scalable architectures and controls for large-scale, cloud-native applications.
• Conduct advanced risk assessments, penetration testing, code reviews, and security investigations.
• Integrate security throughout the SDLC in collaboration with software developers and DevOps teams.
• Define secure architectures and advanced testing and controls for AI models, agents, and MCP servers.
• Evaluate third-party security tools and vendor controls, provide technical feedback, and ensure appropriate implementation.
• Build and scale security automation across CI/CD pipelines and cloud platforms, while guiding junior engineers and contributing to incident response.

Requirements

• Deep expertise in application security, secure software design, and risk management, including OWASP ASVS, OWASP Top 10, and NIST 800-53.
• Extensive experience with complex security assessments and automated controls in large engineering environments.
• Proficiency in multiple programming languages, such as Python, Java, and JavaScript.
• Hands-on experience with SAST, DAST, SCA, IaC, container, and cloud security tools.
• Strong understanding of cloud-native architectures, microservices, Kubernetes, containers, serverless systems, and DevSecOps.
• Advanced understanding of AI/ML security and 5–7 years of relevant Application Security, AppSec engineering, Cloud Security, or Software Engineering experience.

Nice to have

• AWS Certified Security – Specialty, CSSLP, CISSP, Certified DevSecOps Expert, or an equivalent certification.
• Bachelor’s degree in information security, computer science, or a related field, or equivalent experience.

Culture & Benefits

• Full-time employment.
• Opportunity to influence long-term application security direction and improve security practices.
• Collaboration with engineering teams, DevOps teams, and security vendors.
• Equal employment opportunity and non-discrimination throughout the employment process.