Senior Application Security Engineer, AI and Machine Learning

About the role

We are looking for a Senior Application Security Engineer to help secure our AI, machine learning, and inference platforms. This is a hands-on technical role focused on building security into modern AI infrastructure, inference systems, and developer platforms.

Responsibilities

• Secure AI and Machine Learning Systems

  • Perform threat modeling across AI platforms, inference services, and ML pipelines
  • Identify risks such as prompt injection, model extraction, adversarial inputs, and data leakage
  • Review model serving architectures and inference pipelines
  • Partner with ML engineers to secure training, fine tuning, and deployment workflows
  • Help design isolation and security controls for multi-tenant AI workloads

• Application Security Engineering

  • Perform architecture and design security reviews
  • Conduct targeted code reviews for high-risk components
  • Identify security gaps in APIs, microservices, and distributed systems
  • Build secure patterns for authentication, authorization, and service-to-service communication
  • Help engineering teams implement secure defaults and guardrails

• Inference Platform Security

  • Secure customer-facing inference APIs and services
  • Protect against abuse, model extraction, and adversarial behavior
  • Design rate limiting, isolation, and workload protection controls
  • Build monitoring and detection for anomalous inference behavior

• AI Supply Chain and Model Security

  • Evaluate open-source models and dependencies
  • Secure model artifacts and distribution pipelines
  • Implement integrity validation and provenance controls
  • Help secure container images and runtime environments

• Security Automation and Tooling

  • Build security automation for AI and application pipelines
  • Integrate security scanning into CI/CD workflows
  • Develop tooling to help engineers detect and fix issues early
  • Improve developer experience with security guardrails

Requirements

• Strong background in application security engineering

• Experience performing threat modeling and architecture reviews

• Experience securing APIs and distributed systems

• Experience working in cloud environments such as AWS, GCP, or Azure

• Experience with containers and Kubernetes

• Strong scripting or programming skills such as Python, Go, or similar

• Experience working closely with engineering teams to implement security improvements

• AI and Machine Learning Experience

  • Experience securing ML pipelines, inference systems, or data platforms
  • Familiarity with risks such as prompt injection, model extraction, and adversarial inputs
  • Experience reviewing model serving architectures
  • Understanding of training data security and data leakage risks

Qualifications

• Red team or offensive security experience

• Experience crafting payloads and evaluating CVEs for exploitability in diverse environments

• Experience with GPU infrastructure or high-performance computing

• Experience with Hugging Face, PyTorch, TensorFlow, or similar frameworks

• Experience with LLM systems, RAG pipelines, or agent frameworks

• Experience building security automation pipelines

• Experience securing multi-tenant infrastructure

Skills

• Experience with threat modeling and architecture reviews

• Proficiency in scripting or programming languages such as Python, Go, or similar

• Experience with cloud environments such as AWS, GCP, or Azure

• Experience with containers and Kubernetes

• Experience with security automation and tooling

• Experience with AI and machine learning security

Benefits

• Comprehensive medical, dental, and vision coverage (U.S.); Private medical and dental insurance (U.K.)

• Pension contribution (U.K.)

• Generous paid time off, plus holidays

• Paid parental leave

• Professional development support

• Wellness and work-from-home stipends

• Flexible work environment

Pay

The anticipated annual base salary range for this role is: $180,000 - $220,000 USD

Schedule

This role can be based out of one of our office hubs (San Francisco or Seattle) with in-office requirements of at least 2 days per week, plus occasional team/company offsites. We are not able to offer visa sponsorship for this position at this time.