AI Application Security Engineer

Job Title: AI Application Security EngineerJob Position: AI Application Security EngineerRole SummaryThe AI Application Security Engineer at NXP Semiconductors will be responsible for securing AI-powered applications, APIs, Generative AI (GenAI) solutions, and retrieval-augmented generation (RAG) systems deployed across enterprise and engineering environments. This role focuses on securing the application layer of AI systems, including authentication and authorization flows, prompt handling, API integrations, data access patterns, session management, and secure interaction with enterprise systems.The AI Application Security Engineer will work closely with application development teams, AI engineering teams, enterprise security, and architecture teams to ensure AI applications are designed, developed, and deployed securely in alignment with NXP security standards and secure software engineering practices.The ideal candidate will have strong hands-on experience in Application Security, secure coding, API security, cloud-native applications, and modern AI application architectures, with understanding of AI-related risks such as prompt injection, insecure outputs, data leakage, insecure plugins, and retrieval poisoning.This role will support secure AI application development, architecture reviews, AI application security testing, and implementation of scalable application-layer security controls to enable secure enterprise AI adoption.Your OpportunityNXP is a global player in Semiconductor industry, and security is an essential and integral part of our business.Job ResponsibilityConduct application security assessments and secure design reviews for AI-powered applications and GenAI solutionsReview AI integrations involving APIs, plugins, RAG pipelines, vector databases, and enterprise applicationsEvaluate risks related to prompt injection, insecure outputs, data leakage, insecure APIs, and retrieval poisoningSupport secure software development lifecycle (SSDLC) practices for AI applications and AI-enabled development workflowsCollaborate with engineering teams to implement secure coding practices, application-layer controls, and secure authentication and authorization mechanismsSupport AI application penetration testing, API security testing, and remediation activitiesAssist with validating secure use of AI coding assistants and AI-enabled development toolsSupport implementation of controls aligned with NIST AI RMF, OWASP Top 10 for LLM Applications, and secure application engineering practicesJob QualificationDesired EducationBachelor’s degree in computer science, Cybersecurity, Engineering, Information Technology, or a related fieldAdvanced degrees such as Masters are preferredProfessional Experience5+ years of experience in Cybersecurity, Application Security, Runtime Security, or related engineering roles2+ years of experience supporting or securing AI/ML/GenAI applications or platformsExperience with secure software development lifecycle (SSDLC), security testing, and cloud-native security practicesExperience with AI/ML platforms, APIs, orchestration frameworks, or AI-assisted development environmentsFamiliarity with cloud platforms such as AWS or AzureTechnical SkillsUnderstanding of AI/ML/GenAI concepts including LLMs, RAG architectures, APIs, vector databases, and AI-assisted applicationsKnowledge of application security principles including secure coding, API security, authentication and authorization, and tenant isolationKnowledge of AI-related attack vectors including prompt injection, insecure outputs, insecure plugins, and retrieval poisoningFamiliarity with OWASP Top 10 for LLM Applications, OWASP ASVS, MITRE ATLAS, and NIST AI RMF conceptsKnowledge of cloud-native application security, container security, IAM, secrets management, and software security principlesSoft SkillsStrong analytical and problem-solving skillsExcellent communication and collaboration abilitiesAbility to manage multiple initiatives in a fast-paced environmentCertifications (Preferred)AI/ML-related and cybersecurity certifications are considered a plusMore information about NXP in the United States...NXP is an Equal Opportunity/Affirmative Action Employer regardless of age, color, national origin, race, religion, creed, gender, sex, sexual orientation, gender identity and/or expression, marital status, status as a disabled veteran and/or veteran of the Vietnam Era or any other characteristic protected by federal, state or local law. In addition, NXP will provide reasonable accommodations for otherwise qualified disabled individuals.#LI-97b2SummaryLocation: Austin (Oakhill, Office)Type: Full time