Application Security Engineer II

About This Opportunity

We are representing a confidential AI-powered security technology company seeking an Application Security Engineer II to join their remote team. This individual contributor role focuses on securing cloud-native systems, AI-integrated features, and production-scale platforms against emerging threats. You'll work closely with engineering teams to embed security throughout the software development lifecycle while building the tooling and practices that make secure development the default.

Our client operates a fully remote engineering organization with teams distributed globally. This position reports to the Director of Security Engineering and offers significant autonomy in shaping application security practices.

Responsibilities

• Lead threat modeling and security architecture reviews with engineering teams, translating security risks into actionable development guidance with emphasis on AI-powered features and integrations
• Architect, build, and maintain security tooling and CI/CD pipeline integrations that enable secure-by-default development
• Design and deploy automated security testing frameworks to identify vulnerabilities early in the development process
• Act as a hands-on technical contributor during security incidents, analyzing application-level behavior and improving response processes
• Coach developers across the organization on secure coding practices, security architecture principles, and threat modeling for AI-native systems
• Define and track key security posture metrics, building dashboards to visualize security coverage and vulnerability trends

What We're Looking For

Must-Have Qualifications:

• 5+ years of experience in application security engineering roles, ideally securing AWS or comparable cloud-native environments with modern development practices
• Experience securing AI/ML-powered systems, or demonstrated ability to quickly ramp on prompt injection, model supply chain, and agentic-workflow risks
• Strong programming skills in Python, Go, Java, or JavaScript/TypeScript—you write and read production code, not just review it
• Deep expertise in web application security including OWASP Top 10, authentication/authorization, cryptography, and secure API design for modern architectures (microservices, containers, cloud-native)
• Hands-on experience conducting threat modeling and security architecture reviews
• Proven ability to influence and collaborate cross-functionally with engineering, DevOps, and product teams, with strong written communication skills

Nice-to-Have Qualifications:

• Experience working in fast-paced startup environments, comfortable defining scope in a growing security program
• Hands-on experience with commercial security tools such as Veracode, Checkmarx, SonarQube, Wiz, Semgrep, or Burp Suite
• Prior experience building security telemetry pipelines or vulnerability management frameworks
• Exposure to compliance frameworks (SOC 2, ISO 27001) and understanding how development decisions affect auditability
• Familiarity with bug bounty programs and vulnerability disclosure processes

How We Work With You

When you apply through Get A Job.ai, our recruiting team will review your background and schedule an initial screening conversation. We'll discuss your application security experience, technical expertise, and career goals to ensure strong mutual fit. If we move forward together, we will submit your profile to our client and coordinate all interview stages on your behalf.

Please apply exclusively through Get A Job.ai. Do not attempt to contact the client directly, as all candidate communication is managed through our talent team to ensure a smooth and confidential process.

Pay

Compensation details will be discussed during the screening process and are based on experience, qualifications, and geographic location. This role may include bonus or incentive compensation, equity, and comprehensive benefits through the client organization.

Get A Job.ai is an equal opportunity recruiter. We consider all qualified candidates without regard to race, color, religion, sex, national origin, disability, protected veteran status, or other characteristics protected by law.