Among computer and information research scientists, AI is already used for a large share of the tasks. Measured exposure for computer and information research scientists: 34% (high).

Share of this job’s tasks that AI is already used for at work, from real usage. It is not a forecast of job loss, and a low number means no use seen yet. Source: Anthropic Economic Index.

Check how this applies to your own job

Skills this job asks for

Say which you have and which you want to build. We use it to match you to jobs like this one.

About the job

Job Requirements

Sweetwater, the nation's #1 online retailer of pro audio equipment and music instruments, is seeking a Senior AI & AppSec CyberSecurity Engineer to join our growing IT security team. In this senior-level role, you will design and implement the strategy behind how Sweetwater adopts new technology securely.

You'll be responsible for building automated, low-friction guardrails that reduce risk without slowing teams down, and lead secure code review and threat modeling across the software development lifecycle. This is a hands-on position where you stay current with secure coding practices in a fast-evolving development environment, leverage AI to speed up vulnerability review and triage, and mentor engineers while driving secure-by-design decisions across our organization.

This position is a role for security leaders who understand that great security is built into products from the start, not simply put in afterward. You will partner with development teams to establish secure coding standards, guide architectural decisions, and ensure that security doesn't become a roadblock to innovation.

Job Responsibilities

Lead the security oversight of AI tools, platforms, and AI-powered applications adopted across the organization, including evaluating new vendors and models prior to adoption, reviewing supply chain risk, and assessing adversarial robustness while managing data handling and intellectual property considerations

Drive Application Security (AppSec) initiatives across the software development lifecycle, including secure code review, threat modeling, and security testing while leveraging automated tools to improve efficiency and coverage

Develop and maintain AI and AppSec security standards and documentation, supporting audit and regulatory compliance requirements across the enterprise

Partner with software development teams to establish and enforce secure coding standards and testing practices across the organization's applications, including standards for reviewing and validating code

Support the organization's risk exception process, performing security review of policy exceptions and unusual use cases in partnership with relevant stakeholders

Mentor junior security engineers, providing technical guidance and supporting their professional development and growth within the security discipline

Identify, triage, and remediate AI governance and application security risks across Sweetwater's development program within established service levels

Stay current with emerging AI security threats and secure coding practices, and update security frameworks and documentation accordingly

Qualifications

Bachelor's degree in Computer Science, Information Security, or related field, or equivalent professional experience

6+ years of cybersecurity experience, including at least 1 year focused on AI/ML security or governance and 3 years focused on application security

Demonstrated experience in AI/LLM application security, including prompt injection defense, model risk assessment, and generative AI governance frameworks

Strong background evaluating and governing AI coding agents and AI code assist platforms used across both professional software engineering and citizen development contexts

Expertise in evaluating and advising on static, dynamic, and software composition analysis (SAST/DAST/SCA) scanning practices within CI/CD pipelines

Solid understanding of user-developed, low-code/no-code, and shadow IT governance frameworks, including tiered risk models and automated policy enforcement

Strong communication and documentation skills, with the ability to translate security concepts for both technical and non-technical audiences

Hands-on experience reviewing code and conducting security assessments in real-world development environments

One of the following preferred: CSSLP (Certified Secure Software Lifecycle Professional) or GSSP (GIAC Secure Software Programmer)

Sweetwater “Ideal” Team-Player

WOWs The Customer – You possess a deep passion and desire for creating amazing customer & colleague experiences

Gets Things Done – You have a great work ethic and move through tasks with a sense of urgency

Obsesses over the Details – You are committed to paying attention to the details

Drives Continuous Improvement – You are always focusing on effective and efficient work and ways to get better

Develops the Future – You are committed to the pursuit of growing personally & professionally and have a focus on bringing your colleagues along in that journey

We function best as a unified team, so relocation to our state-of-the-art campus in Fort Wayne, IN is required. Interested and qualified candidates, please apply. We look forward to exploring your #FullTimeDream with Sweetwater!

Sweetwater’s culture is one that is built on the creation and celebration of music, which unifies people from all walks of life. Our individual differences make Sweetwater stronger as a company and a better place to work. Having a truly diverse workforce allows us the opportunity to collectively respect, learn and grow from each unique perspective and experience. We have welcomed thousands of employees and families who have joined the Sweetwater team from all over the nation and the world, and we welcome you, too, to find out why we consider a career at Sweetwater the full-time dream