[Remote] Application Security Engineer REMOTE(USC ONLY)

Note: The job is a remote job and is open to candidates in USA. RED Global is seeking an Application Security Engineer for a six-month remote contract with a global client. The role leads threat and vulnerability management for AI workloads, embedding secure-by-design practices, security controls, and governance across AI and agentic application development lifecycles.

Responsibilities

• Integrate and optimize SAST, DAST, SCA, and other application security tooling within AI and agentic CI/CD pipelines
• Develop and maintain secure SDLC controls for AI application development
• Establish security guardrails and best practices for developers, makers, and AI engineering teams
• Collaborate with platform and engineering teams to embed security requirements into AI development workflows
• Lead threat modeling exercises for AI applications, agents, and LLM-powered systems
• Assess risks associated with OWASP LLM Top 10, OWASP Agentic AI Top 10, and other emerging AI security frameworks
• Identify and mitigate AI-specific attack vectors
• Define and enforce vulnerability management standards and SLAs across AI workloads
• Conduct vulnerability assessments and coordinate remediation efforts with development teams
• Track, prioritize, and report application security risks w/ risk-based methodologies
• Monitor security posture and provide recommendations for continuous improvement
• Build and manage Software Bill of Materials (SBOM) capabilities for AI, LLM, and traditional software assets
• Evaluate risks associated with open-source models, libraries, plugins/third-party AI services
• Ensure governance and compliance of AI dependencies throughout the software lifecycle
• Develop security standards, policies, and guidance for AI application development
• Provide training and consultation to development teams on secure AI coding practices
• Participate in architecture reviews and security assessments for AI initiatives
• Support audits, compliance assessments, and security reviews related to AI systems

Skills

• USC ONLY
• 5+ years of experience in Application Security, DevSecOps, Product Security, or Vulnerability Management
• Experience implementing and managing:
• SAST and DAST
• Software Composition Analysis (SCA)
• CI/CD security controls
• Hands-on experience integrating security solutions into modern software delivery pipelines
• Experience conducting threat modeling and security architecture reviews
• Deep understanding of secure application development methodologies
• Knowledge of AI/LLM attack surfaces and emerging AI security risks
• Familiarity with OWASP Top 10, OWASP API Security Top 10, OWASP LLM Top 10, and OWASP Agentic AI guidance
• Experience with container, cloud, and API security
• Knowledge of Software Bill of Materials frameworks/supply chain security practices
• Understanding of DevOps, CI/CD, and cloud-native architectures

Benefits

• 6 month REMOTE contract

Company Overview