Application Security Engineer, AI & Automation [SK-11495]

About the role

Aquent is partnering with a leading financial industry innovator dedicated to securing its vast software ecosystem and pioneering the future of digital security. This organization integrates cutting-edge AI and automation into its security operations, creating a dynamic environment where innovation drives impact. The team is redefining security management by embracing intelligent, automated solutions that protect critical assets and foster a secure development landscape. This role offers the opportunity to shape the future of software defense by engineering next-generation AI-driven security automation, transforming how vulnerabilities are identified, triaged, and remediated. You will build sophisticated, LLM-powered security workflows that enhance organizational resilience, working at the intersection of Application Security, Software Supply Chain Security, and Frontier AI to evaluate, implement, and secure AI-assisted developer tooling.

Responsibilities

• Test, implement, and optimize application security tooling that leverages frontier LLMs for vulnerability identification, code reasoning, triage acceleration, and automated remediation.
• Provide unified triage coverage across SCA, SAST, and DAST findings.
• Lead the rapid assessment and routing of threat intelligence escalations and critical patch events.
• Strengthen open-source dependency selection, package intake, and SBOM visibility.
• Build guardrails to detect malicious packages and enforce security policies across developer pipelines.
• Assess and secure developer environments, including IDEs, plugins/extensions, package managers, and AI coding assistants against malicious code and unsafe configurations.
• Help execute technical proofs-of-value, data handling reviews, and model output evaluations required to safely onboard new AI capabilities across the enterprise.

Requirements

• 3+ years of hands-on experience in Application Security, with deep familiarity across the vulnerability lifecycle (SCA, SAST, DAST, and manual verification).
• Strong engineering fundamentals with scripting languages (e.g., Python, Go), APIs, CI/CD pipelines (e.g., GitHub Actions, GitLab CI), and developer tool integrations.
• Practical familiarity or hands-on experimentation with frontier models (LLMs), AI coding assistants (e.g., Copilot), prompt engineering, or AI orchestration frameworks.
• Experience securing software supply chains, package managers, and third-party dependencies against modern attack vectors.
• Ability to translate complex cryptographic or technical vulnerabilities into clear, actionable remediation guidance for software engineering teams.

Bonus Points

• Contributions to open-source security tools or AI/LLM security projects (e.g., OWASP Top 10 for LLMs).
• Experience building custom integrations or LLM agents to automate security analyst workflows.

Pay

The target hiring compensation range for this role is $92/hour as W2. Compensation is based on several factors including, but not limited to, education, relevant work experience, relevant certifications, and location.

Benefits

Eligible talent get access to benefits such as health benefit contributions, retirement plans with match, and flexible spending accounts.