AI Application Security Engineer (Enterprise AI for Regulated Industries)

A well-funded enterprise AI company building agentic products for government, healthcare and other highly regulated sectors is looking for a hands-on application security engineer to own security at the product and agent layer.

Responsibilities

• Set secure development standards across the products, covering authentication and authorization, secrets handling and input validation, without slowing engineers down
• Build security checks into code review, CI/CD and pre-release gates, and write tooling that scales review across the codebase using AI
• Define how AI agents are scoped and permissioned, where trust boundaries sit, and how third-party integrations and credentials are handled safely
• Partner with product and ML engineers on secure agent design patterns, guardrails and review checklists
• Own application-level protection of sensitive data (PHI, PII, public-sector records) through access controls, output filtering and audit logging
• Produce threat models and architecture reviews that support delivery into regulated customer environments

Qualifications

• 5+ years in application or product security on production systems at scale
• Hands-on coding ability in Python, Go or TypeScript for security tooling and automation
• Strong command of AppSec fundamentals: OWASP Top 10, secure SDLC, AuthN/AuthZ, secrets management and applied cryptography
• A solid grasp of the security risks specific to agentic AI products
• Familiarity with FedRAMP, HIPAA, SOC 2 or ISO 27001 is a plus

Hybrid in San Francisco. Visa transfers considered.