AI Application Security Engineer
NXP Semiconductors21 hours ago
Responsibilities
- Conduct application security assessments and secure design reviews for AI-powered applications and GenAI solutions.
- Review AI integrations involving APIs, plugins, RAG pipelines, vector databases, and enterprise applications.
- Evaluate risks involving prompt injection, insecure outputs, data leakage, insecure APIs, and retrieval poisoning.
- Support secure software development lifecycle practices for AI applications and AI-enabled development workflows.
- Collaborate with engineering teams on secure coding, application-layer controls, authentication, and authorization mechanisms.
- Support AI application penetration testing, API security testing, and remediation activities.
- Validate the secure use of AI coding assistants and AI-enabled development tools.
- Support security controls aligned with NIST AI RMF, OWASP Top 10 for LLM Applications, and secure application engineering practices.
Requirements
- Bachelor’s degree in computer science, cybersecurity, engineering, information technology, or a related field.
- At least 5 years of experience in cybersecurity, application security, runtime security, or related engineering roles.
- At least 2 years of experience supporting or securing AI/ML/GenAI applications or platforms.
- Experience with secure software development lifecycle practices, security testing, and cloud-native security.
- Experience with AI/ML platforms, APIs, orchestration frameworks, or AI-assisted development environments.
- Familiarity with AWS or Azure.
- Knowledge of LLMs, RAG architectures, APIs, vector databases, AI-assisted applications, secure coding, API security, authentication, authorization, and tenant isolation.
- Knowledge of AI attack vectors including prompt injection, insecure outputs, insecure plugins, and retrieval poisoning.
- Familiarity with OWASP Top 10 for LLM Applications, OWASP ASVS, MITRE ATLAS, and NIST AI RMF.
- Knowledge of cloud-native application security, container security, IAM, secrets management, and software security principles.
- Advanced degrees such as master’s degrees and AI/ML or cybersecurity certifications are preferred.
About NXP Semiconductors
NXP Semiconductors designs and supplies microcontrollers, application processors (i.MX), analog/RF, secure connectivity, and automotive chips for OEMs in automotive, industrial/IoT, mobile, and communications infrastructure markets. A public company (NASDAQ: NXPI) founded in 2006 and headquartered in Eindhoven, it sells silicon, software, and reference designs, and supports customers with BSPs and development tools. Notable lines include i.MX processors, S32 automotive platforms, NFC and secure elements, radar, and power management devices.