Staff Application Security Engineer
Remote regions
UtahBenefits
4w PTO
Similar Jobs
See allSenior Security Engineer
Wave
Global
Python
Application Security
Cloud Infrastructure
AI Security Engineer
Alpaca
Americas
Security Engineering
Python
Cloud Security
Sr AI Architect, Application Security
GuidePoint Security
US
Security Architecture
Python
Threat Modeling
Security Engineer
Euler
Brazil
Application Security
AI Security
JavaScript/TypeScript
Senior Forward Deployed Engineer, AI Security
AHEAD
US
Security
AI
Python
Essential Job Duties:
- Lead security reviews and threat models of AI features and agentic systems — including autonomous agents, MCP servers, and third-party integrations.
- Set BambooHR's security standards for AI agents, covering identity, delegated authorization, and safe tool handling.
- Own the design of agents the security team uses for finding validation, triage, review assistance, and remediation.
What You Need to Get the Job Done:
- Bachelor's degree in Computer Science, Information Security, or related field, or equivalent practical experience.
- 8+ years of experience in security, including 5+ years of hands-on application security.
- Experience securing multi-tenant SaaS platforms, cloud security, and building AI agents or agentic workflows.
What Will Make Us REALLY Love You:
- Experience securing MCP servers and gateways, and AI coding assistants at organizational scale.
- Familiarity with AI governance frameworks like NIST AI RMF or ISO/IEC 42001.
- Relevant security certifications (e.g., CSSLP, OSWE, GWAPT) and experience building security champions programs.
BambooHR
BambooHR builds a people intelligence platform that transforms HR and sets people free to do great work. They are a proven market leader driving innovation through sustainable growth, with a values-driven culture that champions professional and personal growth.