FREE ACCESS
5,000–10,000 jobs/day
See all jobs on Scoutfield
Search thousands of fresh jobs every day.
Discover
- Fresh listings
- Fast filters
- No subscription required
Create a free account and start exploring right away.
Staff Security Engineer – AppSec
Stone & Company. Define and implement application security strategies, including for applications using LLMs and generative AI .
Core Competencies
Role fitCore Competencies
Use this summary to align your resume positioning with the role.
Demonstrates expertise in application security strategies, particularly for LLMs and generative AI, while integrating security throughout the software development lifecycle. Proficient in threat modeling, vulnerability assessment, and establishing security standards and best practices.
Highest-signal resume keywords
Application Security StrategiesThreat ModelingCloud Security ServicesVulnerability AssessmentSecurity Standards Development
ATS Keywords
Tailor your resumeApplicant Tracking System Keywords
Tip: use these terms in your resume and cover letter to boost ATS matches.
Hard Skills
Threat ModelingVulnerability AssessmentApplication SecurityAPI Protection MechanismsMobile Application SecurityAutomated Validation ToolsCI/CD SecurityOWASP Top 10MITRE ATLASSecurity Incident Analysis
Soft Skills
Influence SkillsNegotiation SkillsConcise CommunicationProactive Information SeekingIndependent Work
Tools & Technologies
SASTDASTSCASecret ScanningAWSAzureGCP
Industry Keywords
Application SecurityGenerative AILLMsAgile MethodologiesSecurity Best Practices
Tech Stack
Tools & technologiesAWSAzureCloudGoogle Cloud Platform
About the role
Key responsibilities & impact- Define and implement application security strategies, including for applications using LLMs and generative AI
- Collaborate with development teams to integrate security from the beginning of the software development lifecycle
- Conduct architecture, code, and design reviews to identify vulnerabilities
- Define guardrails and standards for LLM-powered applications
- Establish guidelines for the secure use of AI-assisted development tools
- Develop and promote security standards and best practices
- Provide technical guidance and security training
- Use and maintain knowledge of automated validation tools in CI/CD, such as SAST, DAST, SCA, and Secret Scanning
- Monitor threat trends, including threats to AI systems
- Develop solutions to complex security challenges while balancing business needs and risks
- Hunt for threats in corporate and production environments
- Define security architecture standards with Engineering and Product teams
- Create architecture plans and technical roadmaps for migrating legacy systems
- Identify vulnerabilities, assess risks, and help prevent attacks
- Participate in security incident analysis and response
- Train and raise awareness among development teams regarding best practices and the secure use of AI assistants
Requirements
What you’ll need- Completed or ongoing undergraduate degree in Information Security, Computer Science, Information Systems, Software Engineering, or a related field
- Knowledge of common attack vectors
- Experience conducting threat modeling
- Experience with effective protection mechanisms for APIs and mobile applications
- Knowledge of basic Cloud security services and concepts (AWS, Azure, or GCP)
- Familiarity with security risks in applications that use LLMs and generative AI, including the OWASP Top 10 for LLM Applications and MITRE ATLAS
- Ability to identify opportunities for improvement, new solutions, and alerts
- Influence and negotiation skills to guide teams
- Ability to work independently
- Concise, candid, and assertive communication
- Proactive approach to seeking or requesting information
- Comfortable working in multidisciplinary teams using agile methodologies
- Ability to read and communicate in English
Benefits
Comp & perks- Base salary
- Variable compensation package (profit sharing, long-term incentive plan, or commission), subject to role eligibility
- Health and dental insurance with copayments
- Verde Virtual Hospital: 24/7 telemedicine team
- Prescription drug subsidy
- Meal and/or food allowance – Pluxee
- Childcare assistance for children up to 5 years and 11 months old
- Assistance for employees with children with disabilities
- Life insurance
- Fuel allowance or commuting assistance
- Home office allowance for hybrid or remote contracts
- New Parent Welcome Kit
- SESC membership
- Education benefit: Internal self-development platform (Studa and Stone Library)
- Acolhe360º: Free emotional support
- Quick Massage and on-site medical clinic
- Wellhub
- TotalPass
- Pet Club
- Flash
- Férias&Co
- Transportation voucher
- Allya
- Educational partnerships