Senior Application Security Engineer, AI and Machine Learning
Lightning AI5 months ago
Seattle, WA, USA or San Francisco, CA, USASenior
Base Salary
$180k - $220k/yr
Responsibilities
- Perform threat modeling across AI platforms, inference services, and ML pipelines.
- Identify risks including prompt injection, model extraction, adversarial inputs, and data leakage.
- Review model-serving architectures, inference pipelines, APIs, microservices, and distributed systems.
- Secure training, fine-tuning, deployment, and customer-facing inference workflows.
- Design isolation, rate limiting, workload protection, authentication, authorization, and service-to-service communication controls.
- Conduct architecture, design, and targeted high-risk code security reviews.
- Evaluate open-source models and dependencies and secure model artifacts and distribution pipelines.
- Implement integrity validation, provenance controls, and protections for container images and runtime environments.
- Build security automation, monitoring, detection, scanning integrations, and developer guardrails.
- Work with platform, ML, infrastructure, and engineering leadership teams to embed secure defaults and scalable security capabilities.
Requirements
- Strong background in application security engineering.
- Experience with threat modeling and architecture reviews.
- Experience securing APIs and distributed systems.
- Experience working in cloud environments such as AWS, GCP, or Azure.
- Experience with containers and Kubernetes.
- Strong scripting or programming skills such as Python, Go, or similar.
- Experience partnering with engineering teams to implement security improvements.
- Experience securing ML pipelines, inference systems, or data platforms.
- Familiarity with prompt injection, model extraction, adversarial inputs, training-data security, and data-leakage risks.
- Red team or offensive security experience is a strong plus.
- Experience crafting payloads and evaluating CVEs for exploitability is a strong plus.
- Experience with GPU infrastructure or high-performance computing is a strong plus.
- Experience with Hugging Face, PyTorch, TensorFlow, or similar frameworks is a strong plus.
- Experience with LLM systems, RAG pipelines, or agent frameworks is a strong plus.
- Experience building security automation pipelines and securing multi-tenant infrastructure is a strong plus.
Benefits
- In-office work in San Francisco or Seattle at least 2 days per week, with occasional team/company offsites.
- Comprehensive medical, dental, and vision coverage in the U.S.; private medical and dental insurance in the U.K.
- Retirement and financial wellness support in the U.S.; pension contribution in the U.K.
- Generous paid time off and holidays.
- Paid parental leave.
- Professional development support.
- Wellness and work-from-home stipends.
- Flexible work environment.
Tech Stack
Categories
About Lightning AI
Lightning AI builds an end-to-end platform for prototyping, training, and deploying AI systems, alongside open-source tools such as PyTorch Lightning and torchmetrics. It offers a browser-based studio and managed GPU infrastructure for teams ranging from solo researchers to large enterprises, with built-in observability and controls. Founded in 2019 and headquartered in New York, the company merged with Voltage Park to pair developer-first software with large-scale, cost-efficient compute.