Application Security Specialist (AI) (New York City Metropolitan Area)

We are working with a rapidly growing, technology-driven organization seeking an AI (AppSec) Security Engineer to take ownership of its emerging AI security program.

This is not a traditional compliance position. The company needs a hands-on security engineer who can think like an attacker, build practical defenses, and help teams adopt AI without creating unacceptable security or data risks. This is a role that does not require AI AppSec experience in production, but a keen interest in growing into AI AppSec for someone with 2+ years of experience doing Application Security!

You’ll be responsible for:

• Evaluating AI models, agents, platforms, plugins, and integrations before adoption
• Testing for prompt injection, data leakage, insecure connectors, excessive permissions, and other AI-specific vulnerabilities
• Designing security controls for internally developed AI applications
• Performing threat modeling, offensive testing, and security reviews
• Building monitoring and detection capabilities for AI-enabled threats
• Translating AI governance standards into controls that engineers can actually implement
• Partnering with engineering, security, privacy, legal, and business teams

The ideal candidate will bring:

• Strong application, product, or cloud security engineering experience
• A solid understanding of modern AI/LLM architectures and their security risks
• Experience with threat modeling, penetration testing, IAM, data protection, APIs, and secure system design
• The ability to work hands-on while helping define a new security discipline
• Strong communication skills and the judgment to balance innovation with risk

This is a high-visibility opportunity for someone who wants to build an AI security capability from the ground up—not simply inherit an established program.

The company is moving aggressively into AI and needs someone capable of helping it do so safely, practically, and at scale.