Brain Co.
AI Application Security Engineer
San Francisco Bay Area +3 · Remote · Full-time · Posted May 7, 2026
- Location
- San Francisco Bay Area
New York City, NY
London
Remote - Experience
- 5+ years in application security or product security.
About the job
Own and build application-layer security for AI products, including secure development, agent and integration security, and protection of sensitive data.
What you'll do
- Embed security into development workflows through threat modeling, code review, CI/CD checks, and security tooling.
- Define and implement application-layer authorization, trust boundaries, and secure patterns for agents and third-party integrations.
- Protect regulated data with access controls, output filtering, and audit logging.
What they ask for
- 5+ years of experience in application security or product security, including hands-on work on production systems at scale.
- Deep fluency in application security fundamentals, including OWASP Top 10, AuthN/AuthZ, secure SDLC, secrets management, secure integration patterns, and cryptography basics.
- Understanding of agentic AI security and experience protecting sensitive data at the application layer.
- Ability to write code and ship security tooling; AI-native approach to security work.
Nice to have
- Experience with agent security, LLM application security, or authorization and guardrail systems for agentic pipelines.
- Familiarity with FedRAMP, HIPAA, SOC 2, or ISO 27001; proficiency in Python, Go, or TypeScript; or experience with SAST/DAST tooling.
Tools
OWASP Top 10, Python, Go, TypeScript, SAST/DAST
AI focus
Use AI to create threat models, automate security reviews, scale code analysis, and build internal security tooling; secure agentic AI products, integrations, and data flows.
Model-written summary · the original posting is authoritative