Staff Security Engineer

This is a Fully Remote Job About Our Client: The organization is an applied AI engineering firm specializing in integrating AI co-workers into enterprise operations to deliver measurable results. Operating across industries such as Consumer Products and Retail, Education, Energy, Financial Services, Healthcare, and Manufacturing, it provides agile AI solutions with a focus on AWS technologies. Established in 2009, the company maintains delivery centers in North America, Eastern Europe, and Latin America, leveraging teams averaging over 15 years of experience to develop production-ready AI systems efficiently. About the Opportunity: The STAFF SECURITY ENGINEER leads the security aspects of cloud applications and AI systems developed for clients. This role involves defining security architecture and standards, addressing complex security challenges end-to-end, and providing technical leadership across teams. The position is critical in ensuring secure, reliable, and durable AI systems through activities such as threat modeling, security reviews, mentoring, and collaboration with engineering and leadership. Responsibilities: Define security architecture and engineering standards for web, API, and cloud-native systems. Lead threat modeling and security design reviews for applications and AI systems. Architect cloud security controls, including identity, network, and data security. Integrate security automation into CI/CD pipelines with policy-as-code. Lead detection engineering, logging, and incident response for production. Secure AI and LLM-powered applications against risks such as prompt injection and data leakage. Design and integrate AI services into security workflows. Utilize AI tools to enhance quality and efficiency of security work. Collaborate with product, engineering, and leadership to align security strategies with business goals. Communicate security tradeoffs and risks effectively across stakeholders. Mentor junior engineers and promote engineering rigor. Manage high-stakes security tasks with attention to reliability, cost, and safety. Requirements: Minimum 7 years in security or software engineering, with 3 years leading application and cloud security. Expertise in application security, secure coding, and OWASP Top 10. Experience with threat modeling, penetration testing, vulnerability management, and secure code reviews. Deep knowledge of cloud security across identity, network, and data layers. Experience embedding security automation and policy-as-code in CI/CD. Skills in detection engineering, logging, and incident response at scale. Experience securing AI and LLM-powered applications including mitigating prompt injection and model abuse. Familiarity with security, compliance, and governance frameworks. Proven leadership and mentoring capabilities. Strong communication skills for diverse audiences. Proficient use of AI tools such as Claude and Cursor. Strong problem-solving and judgment in ambiguous technical and business contexts. Pay Range and Compensation Package: The pay range and compensation package for this role will be determined based on the candidate's experience, skills, and other relevant factors. Equal Opportunity Statement: Our client is an equal opportunity employer. They celebrate diversity and are committed to creating an inclusive environment for all employees. All qualified applicants will receive consideration for employment without regard to race, color, religion, gender, gender identity or expression, sexual orientation, or national origin. Note: TalentHop is a recruitment partner of this role. Please note that all employment decisions, including candidate assessment, interviews, hiring, compensation, and employment terms, are made exclusively by the hiring employer.