Application Security Engineer II

Stack

Responsibilities

• ▹Lead threat modeling and security architecture reviews, with focus on AI features
• ▹Architect, build, and maintain security tooling and CI/CD integrations
• ▹Design and deploy automated security testing
• ▹Serve as a hands-on technical contributor during security incidents
• ▹Coach developers on secure coding and threat modeling
• ▹Define and track security posture metrics, build dashboards

Requirements

• ▹5+ years of experience in application security engineering roles
• ▹Experience securing AWS or comparable cloud-native environments
• ▹Experience securing AI/ML-powered systems, or ability to ramp fast
• ▹Strong programming skills in Python, Go, Java, or JavaScript/TypeScript
• ▹Expertise in web application security (OWASP Top 10, auth, cryptography, secure API design)
• ▹Hands-on experience threat modeling and security architecture reviews
• ▹Cross-functional collaboration with engineering, DevOps, and product teams

Nice to have

• ▹Experience in fast-paced or startup environments
• ▹Hands-on experience with commercial security tools (Veracode, Checkmarx, SonarQube, Wiz, Semgrep, Burp Suite)
• ▹Experience building security telemetry or vulnerability management pipelines
• ▹Exposure to compliance frameworks (SOC 2, ISO 27001)
• ▹Familiarity with bug bounty programs and disclosure processes

Soft skills

About the company

Abnormal AI builds an AWS-based platform that protects AI-powered systems (LLM integrations, agentic workflows) against threats like prompt injection.