Application Security Engineer II
Abnormal Security2 months ago
Remote, United StatesMid Level
H1B sponsor
Base Salary
$130k - $187k/yr
Responsibilities
- Lead threat modeling and security architecture reviews for engineering teams, especially for LLM integrations, agentic workflows, and MCP connectors.
- Architect, build, and maintain security tooling and integrations for secure development pipelines.
- Design and deploy automated security testing to identify vulnerabilities early.
- Provide hands-on application-level analysis during security incidents and improve response processes.
- Coach developers on secure coding, security architecture, and threat modeling for AI-native systems.
- Define security posture metrics and build dashboards or reports showing security coverage and vulnerability trends.
- Partner with engineering stakeholders and help establish secure coding practices and defensible architectures.
Requirements
- 5+ years of experience in application security engineering, ideally in AWS or comparable cloud-native environments.
- Experience securing AI/ML-powered systems or the ability to quickly learn prompt injection, model supply chain, and agentic-workflow risks.
- Strong production programming skills in Python, Go, Java, or JavaScript/TypeScript.
- Expertise in web application security, including OWASP Top 10, authentication and authorization, cryptography, secure API design, microservices, containers, and cloud-native architectures.
- Hands-on experience with threat modeling and security architecture reviews.
- Ability to collaborate with engineering, DevOps, and product teams and communicate effectively in writing.
- Experience in fast-paced or startup environments is preferred.
- Hands-on experience with Veracode, Checkmarx, SonarQube, Wiz, Semgrep, or Burp Suite is preferred.
- Experience building security telemetry pipelines or vulnerability management frameworks is preferred.
- Exposure to SOC 2, ISO 27001, bug bounty programs, and vulnerability disclosure processes is preferred.
Benefits
- The role may include bonus or incentive compensation, equity, and a comprehensive benefits package.
- Base salary range is $130,100–$187,000 USD.
Tech Stack
Categories
About Abnormal Security
Abnormal Security builds an AI-based cloud email and SaaS security platform for enterprises, preventing phishing, business email compromise, and account takeover. Its products integrate natively with Microsoft 365, Google Workspace, and other business apps, delivered as a subscription service. Founded in 2018 and headquartered in Las Vegas, Nevada, the privately held company focuses on securing large organizations’ email and connected applications.