Application Security Engineer

Responsibilities Threat-model new features and services, focusing on prompt injection, tool misuse, data exfiltration, and cross-tenant access in agent and LLM systems. Review designs and code for backend services, APIs, and mobile apps, and fix vulnerabilities directly when appropriate. Secure authentication, authorization, session handling, OAuth integrations, and multi-tenant systems. Build and tune SAST, dependency, and secrets scanning in CI. Triage and remediate findings from penetration …