Senior Security Engineer – Agentic AI / Application Security

Senior Security Engineer - Agentic AI / Application Security Location: Miami, FL - Onsite 4 days/week Contract: 12+ Months Candidate submission must include:Fully vetted LinkedIn profile Two professional references Strong and demonstrable experience with Security Architecture / AppSec / DevSecOpsExperience with Agentic AI / AI security / LLM securityAbility to work onsite 4 days per week in Miami, FLCandidate must already be local or able to independently commute to Miami — no relocation candidatesRequired strong security architecture, AppSec, DevSecOps, API, infrastructure, and AI security experience. Key Responsibilities Agentic AI & Control Plane Security Design and implement security control planes for Agentic AI systems.Define runtime authorization boundaries for AI agents, including tool-level access control and least-privilege execution.Establish policy enforcement points governing agent behavior before high-impact actions.Support human-in-the-loop workflows for sensitive or high-risk AI-initiated actions.Understand and address security risks associated with LLMs, autonomous agents, tool calling, and non-deterministic execution.Implement appropriate AI guardrails and runtime security frameworks.Apply MCP security standards and agent runtime authorization principles.Identity & Access Management Design and review identity models for guests, employees, service accounts, and non-human/agent identities.Implement or advise on OAuth 2.0/2.1, OIDC, token-based authorization, and short-lived credentials.Design fine-grained, least-privilege access models for distributed systems.Support Non-Human Identity (NHI) lifecycle management.Ensure end-to-end attribution across user → agent → tool/service execution chains.eCommerce & Application Security Secure guest-facing eCommerce flows including search, personalization, cart, and booking.Review backend service architectures supporting AI-driven experiences.Apply strong web application and API security principles.Promote agent-safe API patterns including idempotency, preview/apply workflows, rollback mechanisms, and rate limiting.Understand how data flows through complex architectures and ensure appropriate protection throughout the data lifecycle.Edge, API & Platform Security Collaborate on security controls including WAFs, bot mitigation, API gateways, and edge security.Ensure consistent security policy enforcement from edge → API → service → AI runtime layers.Review API Gateway configurations and security controls.Support secure cloud-native, containerized, and sandboxed deployment patterns across AWS, Azure, and Google Cloud.Understand service-to-service security and complex distributed architectures.DevSecOps & Application Security Integrate security into DevSecOps and software development processes.Review Git repositories and development workflows from a security perspective.Support DAST scanning, vulnerability management, security testing, and remediation.Identify application, API, infrastructure, and architecture-level security vulnerabilities.Partner with engineering teams to implement practical security controls without requiring hands-on application coding.Observability, Logging & Governance Define security telemetry and audit requirements for Agentic AI systems.Review and analyze security logs and telemetry, including Splunk.Support detection and response for runaway agents, excessive autonomy, unauthorized tool usage, and abnormal behavior.Establish appropriate monitoring and auditability across AI and application environments.Align security implementations with enterprise security standards and governance requirements. Core Security Experience Required Experience & Skills 8+ years of experience in Security Engineering, Application Security, Platform Security, or Security Architecture.Strong experience securing large-scale, consumer-facing eCommerce platforms.Strong understanding of Web Application Security and API Security.Strong DevSecOps / AppSec experience is required.Experience working with complex enterprise infrastructure and distributed architectures.Strong understanding of security architecture, data flows, encryption, authentication, authorization, logging, and vulnerability management.Agentic AI / AI Security Hands-on experience building or securing AI/Agentic AI solutions from start to finish.Strong understanding of AI/LLM security concepts.Experience with AI-enabled or automation-heavy systems.Understanding of security risks associated with autonomous and non-deterministic systems.Experience implementing or evaluating AI guardrails and runtime controls.Understanding of Agent Runtime Authorization and MCP security standards.Ability to establish deterministic security controls around non-deterministic AI behavior.Identity & Authorization Deep understanding of:OAuth 2.0/2.1OIDCToken-based authorizationService principalsShort-lived credentialsLeast-privilege accessNon-Human Identity (NHI)Experience designing identity and authorization models for distributed systems.API, Edge & Infrastructure Security Strong understanding of API Gateways and API security.Experience with WAF and edge security controls.Understanding of enterprise infrastructure and complex application architectures.Experience securing cloud-native and containerized environments.Knowledge of AWS, Azure, and/or Google Cloud security architectures.