Descrizione
Key
Responsibilities
• Perform application risk analysis, risk profiling and tiering based on business, data, exposure and regulatory context. • Define security baselines, gates, severity criteria, exceptions and risk-acceptance processes for the AI SDLC. • Design security guardrails and policy-as-code for AI coding agents.
• Orchestrate AI-assisted Web/API security validation and act as the human logic auditor. • Identify systemic vulnerability patterns in AI-generated code and remediate them at the guardrail level. • Perform threat modeling, secure architecture review and targeted code review for high-risk applications.
• Assess AI/LLM risks including prompt injection, data leakage, insecure tool usage and excessive agency. • Manage vulnerability lifecycle, residual risk and the feedback loop into the AI platform. • Review vendor pentest reports, SBOMs, patches and security assurance evidence.
Qualifications
• At least 5 years in application security, product security, penetration testing, DevSecOps or security engineering. • Platform-level thinking and experience designing controls, guardrails or security standards. • Hands-on Web/API security experience and ability to validate findings in source code.
• Experience in application risk assessment, tiering, threat modeling and residual-risk communication. • Strong knowledge of OWASP, API Security, LLM Security, IAM, cloud/container and secure coding. • Understanding of AI-generated code failure modes and AI governance.
• Str
Descrizione completa, azienda e link per candidarti: dopo l'accesso.
AccediI contatti del datore di lavoro (email/telefono/telegram) sono nascosti nell'anteprima pubblica.
Invia il tuo CV così i datori di lavoro possono contattarti direttamente.