Senior Application Security Engineer

Security Assessments:

• Conduct regular security assessments, secure code reviews, threat modeling, and penetration testing (web, API, and cloud-native services) to identify vulnerabilities and provide clear remediation guidance.
• Partner with engineering teams to embed security best practices across the SDLC, establish secure coding guidelines, and deliver pragmatic security enablement.

AI / LLM Security Testing:

• Plan and execute security testing for LLM-enabled applications (chat, copilots, RAG, and agentic workflows), including prompt injection/jailbreak testing and indirect prompt injection via untrusted content.
• Assess sensitive data exposure risks (system prompt leakage, retrieval leakage, secrets exposure, PII disclosure) and validate compensating controls such as redaction, access controls, and logging.

Vulnerability Management:

• Track, analyze, and manage vulnerabilities end-to-end (triage, prioritization, remediation support, and validation) and drive root-cause fixes to reduce recurrence.
• Assist with investigation and response for application security incidents, ensuring timely resolution, documentation, and lessons learned.