Senior AI Security Engineer

About the role

We are seeking a Senior AI Security Engineer to embed security throughout the software development lifecycle, drive shift‑left practices, and leverage AI to accelerate application security work. The position is fully remote, allowing you to work from anywhere in Armenia.

Key responsibilities

• Integrate security into design, code, build, and release processes and maintain security gates in CI/CD pipelines.
• Perform threat modeling, architecture reviews, and secure code reviews (manual and AI‑assisted).
• Operate and tune application security tools such as SAST, DAST, IAST, SCA, secrets scanning, and IaC scanning.
• Manage software supply‑chain security, including SBOM generation, artifact signing, and dependency risk management.
• Run a security champions program, deliver secure‑coding training, and define security standards and policy‑as‑code.
• Build and integrate AI‑assisted automations, LLM‑backed workflows, and prompt engineering to reduce manual effort in vulnerability triage and remediation.
• Design and enforce security controls for AI‑powered application features, covering prompt‑injection defenses, model governance, and OWASP Top 10 for LLM applications.

Required profile

• Bachelor’s degree in Computer Science, Information Security, Engineering or equivalent practical experience.
• Hands‑on application security experience across the full SDLC and strong knowledge of OWASP Top 10.
• Ability to work closely with developers, architects, QA, DevOps, and product teams and influence security practices.
• Practical experience with AI‑assisted security automation, prompt engineering, and safe handling of sensitive data.
• Excellent communication skills for explaining risks and remediation to technical and non‑technical stakeholders.

Required skills

• SAST, DAST, IAST, SCA, secrets scanning, IaC scanning tools.
• CI/CD pipeline integration (e.g., Jenkins, GitHub Actions).
• Programming languages: Python, Java, C#, JavaScript/TypeScript, Go.
• Cloud platforms: AWS, Azure, GCP.
• Security platforms: Snyk, Checkmarx, Veracode, SonarQube, Semgrep, GitHub Advanced Security, Burp Suite, OWASP ZAP.
• Infrastructure‑as‑Code and policy‑as‑code tools: Terraform, Bicep, ARM, OPA, Checkov, Trivy.
• Container and Kubernetes security, secret management (HashiCorp Vault, Azure Key Vault).
• AI/LLM platforms or frameworks: Azure OpenAI, Amazon Bedrock, LangChain, AutoGen.