[Remote] Security Engineer - US/ Canada (Remote)

Note: The job is a remote job and is open to candidates in USA. Connect Tech+Talent is seeking a Security Engineer to lead application and cloud security engineering initiatives. The role focuses on designing scalable security controls, conducting advanced risk assessments, securing AI-powered features, automating security across the SDLC, guiding engineering teams, and supporting incident response.

Responsibilities

• Design and implement security architectures and controls for large-scale, cloud-native applications
• Conduct in-depth risk assessments, including penetration testing and code reviews
• Collaborate with developers and DevOps teams to integrate security at all stages of the software development lifecycle (SDLC)
• Drive security for AI-powered features by defining secure architectures, assessing AI/ML risks, and implementing advanced testing and controls for AI models, agents, and MCP servers
• Identify areas of improvements in security tools and practices, and remediate the identified gap by implementing innovative solutions
• Evaluate thirdparty security tools and vendorprovided controls for technical effectiveness, enterprise fit, and alignment with organization’s security architecture and standards
• Collaborate with vendors to provide actionable technical feedback, drive product improvements, and ensure controls are implemented and configured appropriately for Bloomberg Industry Group’s environment
• Build, improve, and scale security automation, integrating tooling across CI/CD pipelines and cloud platforms
• Provide guidance to junior engineers and cross-functional teams on security best practices
• Participate in incident response efforts and investigations into security incidents
• Stay ahead of the curve by keeping informed of industry trends and emerging threats, applying this knowledge to continually improve security

Skills

• 6 years of relevant experience in Application Security, AppSec engineering, Cloud Security, or Software Engineering
• Deep expertise in application security, secure software design, and risk management, including frameworks such as OWASP ASVS, OWASP Top 10, and NIST 80053
• Extensive experience conducting complex security assessments and building automated security controls for large engineering environments
• Proficiency in multiple programming languages (e.g., Python, Java, JavaScript) and hands-on experience with SAST, DAST, SCA, IaC, container, and cloud security tools
• Strong understanding of modern architectures (cloud-native, microservices, Kubernetes, containers, serverless) and DevSecOps processes
• Advanced understanding of AI/ML security, including model vulnerability analysis, AI threat modeling, secure LLM integration patterns, and familiarity with NIST AI RMF or OWASP Top 10 for LLMs

Benefits

• US/ Canada (Remote)

Company Overview

Company H1B Sponsorship