Senior AI AppSec Engineer

Description

This Senior AI AppSec role supports the company's AI strategy by securing custom and procured AI solutions across the enterprise AI platforms it is building and deploying.

You will work mostly with application teams, advise teams across the organization, and spread AI security principles company-wide.

The company has operated for nine decades and has more than 9,000 associates in over 30 offices worldwide.

Your performance is reviewed once a year, and your pay is set to reward the value you deliver.

Responsibilities

• Work with application teams to secure custom and procured AI solutions.
• Build or buy tooling that protects enterprise AI platforms.
• Partner with platform engineering, security engineering and risk teams so their solutions can adopt AI securely and at scale.
• Use agentic tools to review code and draw data flow diagrams, then identify threats and countermeasures and pass them to application teams as security requirements.
• Advise teams across the organization and promote AI security principles.
• Build or buy technical solutions that add automated security checks to the AI software development lifecycle and ML-Ops.
• Threat model complex agentic and AI systems, and write security requirements with developers, architects and business stakeholders.
• Review code for security vulnerabilities in AI-driven systems.
• Provide thought leadership on information security policies and standards for AI, working with technology risk.
• Act as the AI and agent subject matter expert for AI incidents and security reviews, and help write incident response playbooks for AI-related security incidents.

Requirements

• Strong candidates who do not meet every preferred qualification are encouraged to apply if their experience is related and they can contribute.
• 8+ years of relevant information security experience, with depth in one or more areas such as application security, platform security, penetration testing, DevSecOps or network security. Equivalent experience from related technical roles or proven security leadership also counts.
• Strong knowledge of safety and security risks in Large Language Models and AI agents, including OWASP LLM Top 10, MITRE ATLAS and NIST RMF.
• 5+ years automating security checks, including SAST, SCA and DAST, within CI/CD pipelines.
• Extensive experience with STRIDE or other threat modeling frameworks, and with agile workflows such as Scrum and Kanban.
• Experience in at least one of Python, Java or.NET.
• Ability to partner with stakeholder teams.
• Clear communication, including explaining security risks to leadership.
• Ability to learn quickly, use agentic tools to build security understanding under pressure, and manage several security assessments or tasks at once.
• Preferred: experience with Kubernetes, containers, CI/CD and cloud service providers.
• Preferred: familiarity with the role of key AI platform components such as AI gateways (Kong, Databricks Mosaic AI Gateway, custom API orchestration) and model orchestration tools (LangChain, LlamaIndex, etc.).
• Preferred: familiarity with AI regulatory frameworks such as NIST AI RMF, MITRE ATLAS, GDPR and the EU AI Act.
• Preferred: information security certifications such as CISSP, SANS GIAC or CISA.

Conditions

Base salary ranges: Charlotte $153,842-$246,147; Southern California $179,273-$286,837; New York $190,040-$304,064.

Pay also includes an individual annual performance bonus and the company's annual profitability bonus, subject to plan guidelines, restrictions and vesting requirements.

Temporary positions in the United States are excluded from the compensation and benefit plans described here.

We are an equal opportunity employer and comply with federal, state and local laws against discrimination in all employment decisions, including on the basis of citizenship status, race, religion, sex, gender identity, sexual orientation, disability, age, veteran status and any other characteristic protected by law.

Benefits

• Generous time-away and health benefits from day one.
• Flexible work options are available.
• A retirement plan in which the company contributes 15% of your eligible earnings, with company-funded contributions that factor in salary and variable pay including bonuses.
• 2-for-1 matching gifts for your charitable contributions.
• Opportunity to secure annual grants for organizations you support.
• On-demand professional development resources to build existing skills and learn new ones.