AI Security Engineer, Defensive Automation

Norm Ai

. Design, build, and improve AI-driven security tooling with production-level testing, safeguards, and human oversight .

Posted 11/2/2026full-timeUnited StatesMid-LevelSenior💰 $155,000 - $215,000 per yearWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates strong software engineering skills with production code in modern programming languages, alongside expertise in application security and cloud security fundamentals. Proficient in vulnerability management, threat modeling, and security automation, with the ability to communicate risks effectively to diverse audiences.

Highest-signal resume keywords

Software Engineering SkillsApplication Security FundamentalsThreat Modeling ExperienceVulnerability Management At ScaleSecurity Automation

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

Production CodeLLMsAI AgentsVulnerability ResearchOffensive SecurityExploit DevelopmentDetection And ResponseSecurity AutomationSoftware Supply-Chain SecurityCloud Security Fundamentals

Soft Skills

Calm Judgment During IncidentsStructured Decision-Making

Industry Keywords

Threat IntelligenceMulti-Tenant SaaSHighly Regulated IndustriesCVE CreditsBug Bounty Work

Tech Stack

Tools & technologies

Cloud

About the role

Key responsibilities & impact

Design, build, and improve AI-driven security tooling with production-level testing, safeguards, and human oversight
Assess new and existing systems for risk through threat modeling
Decide where detection and remediation effort should be focused
Join the response rotation for critical vulnerabilities and security events
Assess exposure through remediation during incidents
Track security performance and communicate risks and tradeoffs to technical and non-technical audiences
Hunt proactively for previously unknown weaknesses using automated and manual techniques
Confirm and reproduce findings and feed lessons back into automation
Triage, prioritize, and remediate vulnerabilities at scale
Automate vulnerability management processes
Incorporate threat intelligence and external advisories into remediation priorities
Report to the Chief Security Officer and work closely with Engineering

Requirements

What you’ll need

Strong software engineering skills, with production code in at least one modern language
Hands-on experience building with LLMs or AI agents
Solid application security and cloud security fundamentals
Experience running threat models
Calm, structured judgment during incidents
Deep expertise in at least one area: vulnerability research, offensive security or red teaming, exploit development, CVE credits, bug bounty work, vulnerability management at scale, detection and response, security automation, or software supply-chain security
Threat intelligence experience is a nice to have
Experience in highly regulated industries is a nice to have
Experience securing multi-tenant SaaS is a nice to have
Are legally authorized to work in the United States on a full-time basis
Must be located in Washington, DC or New York City (Washington, DC preferred)

Benefits

Comp & perks

Equity included
401(k) with employer match
Health coverage
Dental coverage
Vision coverage
Unlimited paid time off
Free lunch in office daily
Employee referral bonus program
Financial support to ease your move to New York City