Application Security Engineer (AI/ML & Cloud Security)

Role & responsibilities

Job Description:

We are seeking a highly skilled Application Security Engineer with expertise in Threat Modeling, Risk Assessment, Secure Design, and AI/ML Security. The ideal candidate should have strong knowledge of Web, API, JavaScript (JS) Security, Mobile, and Cloud Security and be well-versed in industry security standards such as OWASP, ASVS, and NIST. This role requires strong communication skills, cross-functional collaboration, and the ability to work across AI/ML, Cloud, and Full Stack Development security environments.

Key Responsibilities:

• Conduct Threat Modeling and Risk Assessments to identify security vulnerabilities.
• Develop and implement secure design principles for applications and AI/ML models.
• Perform application security testing (SAST, DAST, IAST, RASP) for Web, API, JS, and Mobile applications.
• Implement security measures for AI/ML models, ensuring protection against adversarial attacks and data poisoning.
• Design and enforce API security best practices, including authentication, authorization, and encryption.
• Develop and maintain secure coding guidelines for web, mobile, and cloud applications.
• Align security strategies with industry standards such as OWASP, ASVS, and NIST.
• Collaborate with AI/ML engineers, DevOps teams, and software developers to integrate security into SDLC.
• Ensure cloud security compliance and implement best practices for AWS, Azure, or GCP environments.
• Provide security architecture recommendations for full-stack development projects.

Qualifications:

• 6-9 years of experience in Application Security, AI/ML Security, and Cloud Security.
• Expertise in Threat Modeling, Risk Assessment, and Secure Design.
• Strong knowledge of Web, API, JS, Mobile, and Cloud Security.
• Familiarity with OWASP, ASVS, NIST security frameworks and best practices.
• Hands-on experience securing AI/ML models and mitigating adversarial threats.
• Experience with application security tools (Burp Suite, ZAP, Snyk, SonarQube, etc.).
• Strong understanding of encryption, authentication, and secure coding practices.
• Excellent communication skills and ability to work cross-functionally.