AI-Application Security Engineer

3 months ago

St. Louis, MO, USAMid Level

Responsibilities

Operationalize security architecture, standards, approved security patterns, and secure-by-design practices across applications and AI-enabled systems.
Partner with engineering teams to embed security controls into software development and AI lifecycles.
Evaluate, test, integrate, tune, and scale application and AI security tooling, including AI red teaming, AI and MCP gateways, DAST, SAST, SCA, API security, and mobile application security capabilities.
Implement runtime monitoring, governance controls, testing platforms, and posture management capabilities.
Use AI, automation, Python, AWS services, and CI/CD pipelines to scale security operations, vulnerability management, and developer enablement.
Triage, validate, prioritize, and drive remediation of application and AI security vulnerabilities.
Guide developers and low-code/no-code users on secure development, integration patterns, platform risks, and remediation.
Support security reviews and risk assessments for AI platforms, models, agents, skills, MCPs, and third-party integrations.
Develop and maintain secure coding standards, guardrails, implementation guidance, and technical documentation.
Monitor emerging cybersecurity and AI security threats and incorporate mitigations into tooling and control design.
Mentor junior engineers and help mature application and AI security practices.

Bachelor’s degree in Computer Science, Information Systems, Cybersecurity, Computer Engineering, Software Engineering, or a related combination of education and experience.
At least 2 years of information security or software development experience.
Understanding of application and AI security principles, methods, technologies, and AI-specific risks such as prompt injection, model abuse, insecure agentic integrations, and data leakage.
Strong analytical, problem-solving, communication, collaboration, prioritization, and deadline-management skills.
Knowledge of security architecture, threat modeling, and secure design.
Preferred certifications include CISSP, CSSLP, GIAC, or similar.
Preferred experience includes C#, Angular, Python, cloud platforms, AWS, GitHub, application security tooling, AI coding assistants, skills, MCPs, and agents.

5,001-10,000 employees