Staff Security Engineer

This position is listed on behalf of a partner company, who manages all applications and next steps. Our partner is looking for a Staff Security Engineer based in the United States. This senior technical role will lead security engineering across cloud applications, enterprise platforms, and AI-powered systems. You will define security architecture and standards while owning some of the most complex security challenges from design through production. The position combines application security, cloud security, threat modeling, detection engineering, incident response, and AI security. You will work closely with engineering, product, data, leadership, and client teams to embed security into fast-moving development environments. A key focus will be securing AI and LLM applications against emerging risks such as prompt injection, data leakage, model abuse, and agentic-AI threats. You will also mentor engineers, influence technical direction, and introduce automation and policy-as-code to strengthen security at scale. This is an ownership-driven environment where technical depth, sound judgment, practical execution, and a strong commitment to engineering quality are highly valued.

Define security architecture and engineering standards across web applications, APIs, cloud-native systems, and complex services. Lead threat modeling, security design reviews, and risk assessments across application and AI systems. Architect and implement cloud security controls across identity, networking, and data layers, including IAM, secrets management, and encryption strategies. Drive the integration of security automation into CI/CD pipelines, including shift-left security practices and policy-as-code. Lead detection engineering, security logging, monitoring, and incident response practices across production environments. Own security for AI and LLM-powered applications, developing defenses against prompt injection, data leakage, model abuse, and agentic-AI risks. Design and integrate AI services into security workflows, including LLM APIs, tool and function calling, and multi-step agent workflows for detection and triage. Use modern AI development and productivity tools to improve the quality, speed, and effectiveness of security engineering work. Partner with product, engineering, leadership, data, and client teams to shape security strategy and align technical decisions with business objectives. Translate complex security risks, tradeoffs, and opportunities into clear recommendations for both technical and non-technical stakeholders. Lead security reviews, technical discussions, and constructive engineering challenges that raise the overall security standard. Mentor junior and mid-level engineers through coaching, code reviews, pairing, and hands-on technical guidance. Take ownership of ambiguous and high-impact security initiatives, driving them through production while considering reliability, cost, and safety. Define responsible AI security practices and contribute to long-term security architecture and engineering strategy. Requirements: 7+ years of professional experience in security engineering or software engineering, including at least 3 years leading application and cloud security initiatives. Deep expertise in application security, secure coding practices, and the OWASP Top 10. Strong experience with threat modeling, penetration testing, vulnerability management, and secure code reviews. Extensive cloud security experience spanning identity, network, and data protection. Proven experience integrating security automation and policy-as-code into CI/CD pipelines. Strong experience with detection engineering, security logging, monitoring, and incident response at scale. Demonstrated experience securing AI and LLM-powered applications, including knowledge of prompt injection, data leakage, model abuse, and agentic-AI threats. Experience working with security, compliance, and governance frameworks. Demonstrated technical leadership and mentoring experience across engineering teams or organizations. Excellent stakeholder communication skills, with the ability to explain complex security concepts and tradeoffs to varied audiences. Strong hands-on expertise with AI-forward development and productivity tools such as Claude, Cursor, or comparable platforms. Excellent analytical and problem-solving skills, with the ability to navigate ambiguous technical and business challenges using sound judgment. Strong sense of ownership, accountability, attention to detail, and commitment to delivering high-quality production systems. Comfortable working in a fast-paced environment where priorities, technologies, and requirements can evolve quickly. Willingness to challenge assumptions constructively, provide direct feedback, and collaborate closely with experienced technical teams. Ability to balance security rigor with practical delivery, business constraints, timelines, and client needs. Must be authorized to work in the United States; applicants outside the U.S. will not be considered. Willingness to complete required identity verification and background screening in accordance with applicable requirements. Availability for an initial 6-month contract assignment . Benefits: Compensation range of approximately $56–$77 USD per hour , depending on qualifications, experience, location, and other relevant factors. Comprehensive benefits package for eligible employees. Medical, dental, and vision insurance. 401(k) retirement plan. Paid time off. Fully remote work within the United States. Opportunity to work on production AI systems and complex cloud security challenges. Exposure to modern AI engineering tools and emerging AI security practices. Collaborative environment with experienced engineering and technology professionals. Opportunities to influence security architecture, engineering standards, and technical direction. Meaningful technical ownership across client-facing and enterprise technology initiatives.

laptop-ats-crawler v3