Abnormal Security
Application Security Engineer II
$130K–$187K
Remote - USA · Remote · Full-time · Posted Aug 7, 2026
- Experience
- 5+ years in application security engineering roles.
About the job
Secures Abnormal AI’s AWS-based platform and AI-powered features by integrating application security into development, reviewing architectures, and building security tooling and practices.
What you'll do
- Lead threat modeling and security architecture reviews, particularly for AI-powered features.
- Build security tooling, CI/CD integrations, and automated testing; contribute to application-level incident response.
- Coach developers and track security posture metrics, coverage, and vulnerability trends.
What they ask for
- 5+ years of experience in application security engineering roles.
- Experience securing AI/ML-powered systems or ability to ramp quickly on related risks.
- Strong programming skills in Python, Go, Java, or JavaScript/TypeScript, with production-code experience.
- Expertise in web application security and hands-on threat modeling and security architecture reviews.
Nice to have
- Experience in fast-paced or startup environments; security telemetry or vulnerability management experience.
- Experience with commercial security tools, compliance frameworks, or bug bounty and vulnerability disclosure processes.
Pay
$130,100 — $187,000 USD (base salary)
Tools
AWS, Python, Go, Java, JavaScript/TypeScript, Veracode, Checkmarx, SonarQube
AI focus
Secure LLM integrations, agentic workflows, MCP connectors, and the model supply chain, including prompt-injection and related risks.
Model-written summary · the original posting is authoritative