AI Application Security Engineer (Enterprise AI for Regulated Industries)

A well-funded enterprise AI company building agentic products for government, healthcare and other highly regulated sectors is looking for a hands-on application security engineer to own security at the product and agent layer.

Responsibilities

Set secure development standards across the products, covering authentication and authorization, secrets handling and input validation, without slowing engineers down

Build security checks into code review, CI/CD and pre-release gates, and write tooling that scales review across the codebase using AI

Define how AI agents are scoped and permissioned, where trust boundaries sit, and how third-party integrations and credentials are handled safely

Partner with product and ML engineers on secure agent design patterns, guardrails and review checklists

Own application-level protection of sensitive data (PHI, PII, public-sector records) through access controls, output filtering and audit logging

Produce threat models and architecture reviews that support delivery into regulated customer environments

Qualifications

5+ years in application or product security on production systems at scale

Hands-on coding ability in Python, Go or TypeScript for security tooling and automation

Strong command of AppSec fundamentals: OWASP Top 10, secure SDLC, AuthN/AuthZ, secrets management and applied cryptography

A solid grasp of the security risks specific to agentic AI products

Familiarity with FedRAMP, HIPAA, SOC 2 or ISO 27001 is a plus

Hybrid in San Francisco. Visa transfers considered.