FREE ACCESS
5,000–10,000 jobs/day
See all jobs on Scoutfield
Search thousands of fresh jobs every day.
Discover
- Fresh listings
- Fast filters
- No subscription required
Create a free account and start exploring right away.
Staff Application Security Engineer
CGWS - COME GROW WITH US. Lead security reviews and threat models of AI features and agentic systems, including autonomous agents, MCP servers, and third-party integrations .
Core Competencies
Role fitCore Competencies
Use this summary to align your resume positioning with the role.
Demonstrates expertise in application security, threat modeling, and secure design for AI features and agentic systems. Proficient in integrating security practices into the software development lifecycle and mentoring engineering teams on security standards and best practices.
Highest-signal resume keywords
Application SecurityThreat ModelingAI GovernanceCloud Security (AWS, Azure, GCP)Mentoring Engineers
ATS Keywords
Tailor your resumeApplicant Tracking System Keywords
Tip: use these terms in your resume and cover letter to boost ATS matches.
Hard Skills
Security ReviewsAI Agents DevelopmentMulti-Tenant SaaS SecurityWeb Application SecurityAPI SecurityOAuth 2.0OpenID ConnectSession ManagementData Leakage EvaluationOWASP Top 10 Familiarity
Soft Skills
LeadershipInfluencing Without AuthoritySound JudgmentCoachingCollaboration
Tools & Technologies
CI/CD PipelinesSecurity ToolsAgent-Assisted Code ReviewValidation ToolsRemediation Tools
Industry Keywords
Information SecurityAI FeaturesAgentic SystemsSecurity StandardsIncident ResponseLegal CompliancePrivacy RegulationsGRC
Tech Stack
Tools & technologiesAWSAzureCloudGoogle Cloud PlatformPHPPythonTypeScript
About the role
Key responsibilities & impact- Lead security reviews and threat models of AI features and agentic systems, including autonomous agents, MCP servers, and third-party integrations
- Set security standards for AI agents, including identity, delegated authorization, data access, tool output, tool supply chain, and human-approval requirements
- Design and ship security-team agents for finding validation, triage, review assistance, and remediation
- Help developers and security champions build and use agents safely through guidance and tooling
- Embed security requirements into the software development lifecycle, including design-time and release-time gates for AI features
- Integrate agent-assisted code review, finding validation, and fix suggestions into CI/CD pipelines
- Run multi-team, multi-quarter security programs and report progress, risks, and tradeoffs to leadership
- Represent Application Security in architecture forums and act as an escalation point
- Partner with Legal, Privacy, and GRC on AI governance and emerging AI regulations
- Train and coach software engineers on secure design and threat modeling
- Mentor security engineers on technical direction and career growth
- Participate in an on-call rotation and support incident response
Requirements
What you’ll need- Bachelor's degree in Computer Science, Information Security, or a related field, or equivalent practical experience
- 8+ years of experience in security, including 5+ years of hands-on experience in application security
- Experience securing multi-tenant SaaS platforms, including tenant isolation
- Cloud and infrastructure security experience, such as AWS, Azure, or GCP
- Hands-on experience building AI agents or agentic workflows
- Ability to evaluate the security of AI and agentic systems, including prompt injection, tool and context poisoning, excessive agency, delegated authorization, data leakage, and supply-chain risk
- Familiarity with OWASP Top 10 for LLM Applications, OWASP Top 10 for Agentic Applications, or comparable frameworks
- Ability to design evaluations for agentic workflows
- Experience leading threat modeling and design reviews for complex applications and APIs
- Deep understanding of web application and API security, authentication, authorization, OAuth 2.0, OpenID Connect, session management, and access control models
- Strong software engineering skills in at least one language, such as Python, TypeScript, or PHP
- Experience leading cross-team initiatives and influencing without authority
- Experience mentoring engineers
- Sound judgment in ambiguous situations
- Employment contingent on passing background and credit checks
Benefits
Comp & perks- Comprehensive health, life, and disability insurance
- Generous leave policies including 4 weeks of vacation, 12 company holidays, parental leave, and volunteer time off
- 401k plan with up to 6% company match
- $2000 Paid-Paid Vacation bonus
- EAP through Headspace
- Professional development
- Flexible work arrangements
- Great company culture