Application Security Engineer II

About the Role:

• Secure AI-powered systems at the core of our AWS-based platform (LLM-integrated features, agentic workflows, MCP connectors, and model supply chain) against threats like prompt injection at production scale.
• Blend deep application security expertise with strong engineering fundamentals, focusing on integrating security into every phase of the SDLC.
• Own security architecture and development of secure coding practices while partnering with engineering teams to build defensible architectures.

What You Will Do:

• Lead threat modeling and security architecture reviews with engineering teams by translating security risks into concrete development actions.
• Architect, build, and maintain security tooling and integrations that make secure development the default in our CI/CD pipelines.
• Design and deploy automated security testing to identify vulnerabilities early in the development process.

Must Haves:

• 5+ years of experience in application security engineering roles, ideally securing AWS or comparable cloud-native environments.
• Strong programming skills in Python, Go, Java, or JavaScript/TypeScript; you write and read production code.
• Expertise in web application security including OWASP Top 10, authentication/authorization, cryptography, and secure API design.