Application Security Engineer

About the role

We are seeking a highly experienced Senior Application Security Engineer with strong hands-on software engineering experience, Python automation, and expertise in AI/ML, LLMs, and application security. The ideal candidate must be a hands-on engineer who has shipped production code, not simply worked security-adjacent.

Requirements

• 10‑15+ years in Software Engineering & Application Security
• Strong hands‑on Python development for automation and security tooling
• Proficiency with Claude Code, including Skills, Subagents, Hooks, Slash Commands, and MCP integrations
• Experience building reusable AI‑powered security workflows and automation
• Working knowledge of AI Agents / Agentic AI frameworks
• Understanding of OWASP LLM Top 10, prompt injection, agent permissions, and AI/model supply‑chain risks
• Strong Secure SDLC and Threat Modeling experience
• Expertise in OWASP Top 10, API Security, Authentication & Authorization
• Strong engineering judgment with the ability to automate, troubleshoot, escalate, and independently resolve security issues

Skills

• Production experience securing LLM / Agentic AI systems
• Experience building internal AI Security tooling
• Open‑source security tool contributions
• OSCP / GWAPT / CSSLP certifications (nice to have)

Location: Princeton, NJ & NYC, NY (Hybrid). Experience: 10‑15+ years. Work Authorization: USC / H‑4 EAD only.