Senior Security Engineer - AI & Application Security

Location: South Florida / Miami area

Work Model: Hybrid / Onsite

Engagement: Contract with potential Contract-to-Direct Hire

Duration: 6–12 months + with potential contract-to-direct

US Citizen and Green Cards candidates only.

Help Secure How AI Connects Into the Enterprise

We are looking for a Senior Security Engineer with strong AppSec foundations and architecture-level thinking who can work across complex applications, APIs, identity, cloud, and emerging AI systems.

This is not a coding role and it is not traditional AppSec focused primarily on scanning, testing, or vulnerability management.

The right person can look across:

Front End → Middleware → APIs → Backend Systems → Identity → Cloud → AI

…and determine how the pieces connect, where trust can break, where security controls belong, and what needs to happen next.

What You’ll Do

• Review complex application and AI-enabled architectures
• Determine appropriate security controls across applications, APIs, IAM, cloud, and AI
• Evaluate authentication, authorization, identity flows, APIs, and backend connectivity
• Apply practical AppSec and API security principles to architecture decisions
• Assess Agentic AI, MCP/tool interactions, and runtime security considerations
• Support security technology PoVs and recommend best-fit solutions
• Act as a technical bridge between the business and Information Security
• Coordinate across Security, Engineering, Product, IAM, Cloud, and Architecture
• Drive issues, decisions, and PoVs through to closure
• Track work through Jira and Confluence and operate with limited day-to-day direction

What We’re Looking For

• 8+ years across security engineering, AppSec, product/platform security, or security architecture
• Strong understanding of enterprise application architecture
• Working AppSec knowledge with solid API and backend-system security
• Understanding of IAM, authentication, authorization, and identity flows
• Familiarity with Ping/ForgeRock, Entra, OAuth, OIDC, tokens, or similar identity technologies
• Working knowledge of cloud and distributed systems
• Exposure to AI-enabled applications or AI security
• Ability to understand code and application behavior without needing to be a developer
• Strong communication, autonomy, and outcome orientation

What Will Separate You

+ Critical thinking.

+ US Citizen and Green Cards candidates only.

+ We want someone who can take an ambiguous, multi-layer technical problem and clearly answer:

What is happening? → Where is the risk? → Where should the control sit? → Who owns it? → What happens next?

We will want to hear real examples of complex technical problems you worked through, the decisions you made, and the outcomes you created.

Helpful, Not Required

• Direct Agentic AI or MCP experience
• eCommerce or high-volume consumer applications
• Non-human/workload identity
• API gateways, WAF, and edge controls
• DevSecOps
• Runtime authorization or policy enforcement

Direct eCommerce experience is not required and can be learned in the environment.

Location Requirement

This position requires onsite presence in South Florida 4 days per week.

If you are an AppSec/security engineer who thinks like an architect and can connect applications, APIs, identity, AI, and security controls, we would like to talk.