Application Security Engineer II

Abnormal AI is seeking an Application Security Engineer II to secure its AI-powered systems, focusing on integrating security into the software development lifecycle, conducting security reviews, and collaborating with engineering teams.

The successful candidate will own the security architecture and development of secure coding practices, coach developers on application security principles, and contribute directly to keeping applications and customers secure.

Responsibilities:

• Lead threat modeling and security architecture reviews with engineering teams, focusing on AI-powered features.
• Architect, build, and maintain security tooling and integrations for secure development in CI/CD pipelines.
• Design and deploy automated security testing to identify vulnerabilities early in the development process.
• Serve as a hands-on technical contributor during security incidents.
• Coach developers on secure coding, security architecture, and threat modeling for AI-native systems.
• Define and track key security posture metrics.

Requirements:

• 5+ years of experience in application security engineering roles.
• Experience securing AI/ML-powered systems or ability to quickly adapt.
• Strong programming skills in Python, Go, Java, or JavaScript/TypeScript.
• Expertise in web application security, including OWASP Top 10 and secure API design.
• Hands-on experience with threat modeling and security architecture reviews.
• Proven ability to influence and collaborate cross-functionally.

Nice to Have:

• Experience working in fast-paced or startup environments.
• Hands-on experience with commercial security tools.
• Prior experience building security telemetry pipelines or vulnerability management frameworks.
• Exposure to compliance frameworks and bug bounty programs.

The role offers a base salary range of $130,100-$187,000 USD, bonus or incentive compensation, equity, and a comprehensive benefits package.