Senior Security Engineer - AI & Application Security

Location: South Florida / Miami area

Work Model: Hybrid / Onsite

Engagement: Contract with potential Contract-to-Direct Hire

Duration: 6–12 months + with potential contract-to-direct

US Citizen and Green Cards candidates only.

You could be just the right applicant for this job Read all associated information and make sure to apply.

Help Secure How AI Connects Into the Enterprise

We are looking for a Senior Security Engineer with strong AppSec foundations and architecture-level thinking who can work across complex applications, APIs, identity, cloud, and emerging AI systems.

This is not a coding role and it is not traditional AppSec focused primarily on scanning, testing, or vulnerability management.

The right person can look across:

Front End ? Middleware ? APIs ? Backend Systems ? Identity ? Cloud ? AI

…and determine how the pieces connect, where trust can break, where security controls belong, and what needs to happen next.

What You'll Do

• Review complex application and AI-enabled architectures
• Determine appropriate security controls across applications, APIs, IAM, cloud, and AI
• Evaluate authentication, authorization, identity flows, APIs, and backend connectivity
• Apply practical AppSec and API security principles to architecture decisions
• Assess Agentic AI, MCP/tool interactions, and runtime security considerations
• Support security technology PoVs and recommend best-fit solutions
• Act as a technical bridge between the business and Information Security
• Coordinate across Security, Engineering, Product, IAM, Cloud, and Architecture
• Drive issues, decisions, and PoVs through to closure
• Track work through Jira and Confluence and operate with limited day-to-day direction

What We're Looking For

• 8+ years across security engineering, AppSec, product/platform security, or security architecture
• Strong understanding of enterprise application architecture
• Working AppSec knowledge with solid API and backend-system security
• Understanding of IAM, authentication, authorization, and identity flows
• Familiarity with Ping/ForgeRock, Entra, OAuth, OIDC, tokens, or similar identity technologies
• Working knowledge of cloud and distributed systems
• Exposure to AI-enabled applications or AI security
• Ability to understand code and application behavior without needing to be a developer
• Strong communication, autonomy, and outcome orientation

What Will Separate You

• Critical thinking.

• US Citizen and Green Cards candidates only.

• We want someone who can take an ambiguous, multi-layer technical problem and clearly answer:

What is happening? ? Where is the risk? ? Where should the control sit? ? Who owns it? ? What happens next?

We will want to hear real examples of complex technical problems you worked through, the decisions you made, and the outcomes you created.

Helpful, Not Required

• Direct Agentic AI or MCP experience
• eCommerce or high-volume consumer applications
• Non-human/workload identity
• API gateways, WAF, and edge controls
• DevSecOps
• Runtime authorization or policy enforcement

Direct eCommerce experience is not required and can be learned in the environment.

Location Requirement

This position requires onsite presence in South Florida 4 days per week. xhyhwjd

If you are an AppSec/security engineer who thinks like an architect and can connect applications, APIs, identity, AI, and security controls, we would like to talk.