The Role
Designs and maintains secure CI/CD pipelines, establishes SSDLC and threat-modeling practices, implements automated compliance controls, conducts security assessments, and improves cloud-native security monitoring. The role also addresses AI-specific risks involving LLMs, agents, prompt injection, data leakage, model supply chains, and AI-assisted development. Partners with engineering teams to govern AI-powered development tools and drive cybersecurity initiatives.
Summary Generated by Built In
We are seeking a Senior Security Engineer to join our growing security team. As we continue building AI-powered services that deliver tremendous value to our customers worldwide, and given the rapid pace of our business growth, we are looking for experienced and capable talent to strengthen cybersecurity across all stages of product development and to collaborate closely with our software engineering teams. You will also play a key role in driving information security initiatives and integration efforts across the group, including addressing the emerging risks introduced by rapid advancements in AI technologies.
Responsibilities- Design, implement, and maintain secure CI/CD pipelines with automated security controls (SAST, DAST, SCA, secrets scanning, and IaC scanning) integrated into development workflows
- Establish and drive the Secure Software Development Lifecycle (SSDLC), ensuring security is embedded at every stage — from design and threat modeling through deployment and runtime
- Define and standardize security requirements analysis and threat modeling practices to identify risks during the design phase
- Develop Policy as Code solutions to enable automated compliance and governance checks
- Conduct pre-production security assessments, vulnerability assessments, and penetration testing
- Implement security best practices for Infrastructure as Code (IaC) and cloud-native environments
- Build and maintain security monitoring, log aggregation, and alerting systems to support detection and response
- Create security deployment checklists and continuously improve production environment security posture
- Assess and mitigate emerging risks introduced by AI technologies, including risks related to LLM applications, AI agents, prompt injection, data leakage through AI tools, model supply chain, and AI-assisted development workflows
- Partner with engineering teams to evaluate, adopt, and govern AI-powered development tools (e.g., AI coding assistants, AI agents) in a secure and compliant manner
- Minimum 4 years of experience in cybersecurity, DevSecOps, or software development
- Solid understanding of the Secure Software Development Lifecycle (SSDLC) and modern application security practices
- Hands-on experience in software product engineering, deployment, and system integration
- Practical experience leveraging AI automation or AI agents in day-to-day work (e.g., Claude Code, Cursor, GitHub Copilot, Claude/ChatGPT, or custom AI agent workflows for security operations, code review, or automation)
- Ability to evaluate product performance metrics, diagnose issues, and drive resolution
- Ability to stay current with advancements in technical product development and the evolving AI/security landscape
- Strong communication and interpersonal skills, with the ability to collaborate effectively across engineering and business teams
- BS/MS in Computer Science or a related field
- Relevant security certifications (CISSP, CCSP, SSCP, CSSLP, CC, CISM, CEH, etc.)
- Experience with compliance frameworks such as ISO 27001 or SOC 2
- Blue team experience, including SOC operations or threat hunting
- Experience participating in red-blue team exercises or CTF competitions
- Experience designing and implementing SSDLC processes from the ground up
- Familiarity with AI security frameworks (e.g., OWASP Top 10 for LLM Applications, MITRE ATLAS, NIST AI RMF) and securing AI/ML pipelines
#LI-TC1
Skills Required
- Minimum 4 years of experience in cybersecurity, DevSecOps, or software development
- Solid understanding of the Secure Software Development Lifecycle and modern application security practices
- Hands-on experience in software product engineering, deployment, and system integration
- Practical experience leveraging AI automation or AI agents in day-to-day work
- Ability to evaluate product performance metrics, diagnose issues, and drive resolution
- Ability to stay current with technical product development and the evolving AI and security landscape
- Strong communication and interpersonal skills with effective cross-functional collaboration ability
- Bachelor’s or master’s degree in Computer Science or a related field
- Relevant security certifications such as CISSP, CCSP, SSCP, CSSLP, CC, CISM, or CEH
- Experience with ISO 27001 or SOC 2 compliance frameworks
- Blue team experience, including SOC operations or threat hunting
- Experience participating in red-blue team exercises or CTF competitions
- Experience designing and implementing SSDLC processes from the ground up
- Familiarity with OWASP Top 10 for LLM Applications, MITRE ATLAS, NIST AI RMF, and securing AI/ML pipelines
Am I A Good Fit?
Get Personalized Job Insights.
Our AI-powered fit analysis compares your resume with a job listing so you know if your skills & experience align.
Success! Refresh the page to see how your skills align with this role.
The Company
What We Do
Appier is a software-as-a-service (SaaS) company that uses artificial intelligence (AI) to power business decision-making. Founded in 2012 with a vision of democratizing AI, Appier now has 17 offices across APAC, Europe and U.S., and is listed on the Tokyo Stock Exchange (Ticker number: 4180). Visit www.appier.com for more information.
