Staff Security Engineer – Application Security & AI

I spend a lot of my time speaking with security engineers who have come into Cybersecurity from a software engineering background, and I’m very interested in those who have continued to write code and build security solutions throughout their careers.

I’m representing a highly sophisticated technology driven organisation in New York that’s looking to hire an experienced, hands on security engineer with strong software engineering foundations.

The technical bar is exceptionally high, and my client wants someone who understands how applications are built, how they can be attacked and, importantly, how to engineer solutions that make them more secure.

This isn’t about running security scanners, reviewing reports or simply telling developers what they need to fix.

They’re looking for someone who can build security tooling, develop custom analysis capabilities and work directly with engineering teams to identify and solve complex application security problems.

One of the most interesting aspects of this opportunity is the work they’re doing around AI. My client wants to use AI and autonomous agents to change how application security is delivered. That includes building workflows that continuously analyse code changes, investigate vulnerabilities, identify false positives and recommend fixes.

They also need someone who understands the security risks associated with AI-powered development tools, particularly around identity, access to sensitive data and how autonomous agents interact with internal systems.

The engineers I’m most interested in speaking to are those who can demonstrate:

• Strong software engineering ability, with experience writing production quality code and building security tools or capabilities.
• Deep application security knowledge, including secure design, code review, vulnerability research and remediation.
• A solid understanding of web application security, authentication, identity protocols and encryption.
• Experience developing custom security tooling, scanners, analysis platforms or other security-focused software.
• Practical experience using AI in engineering workflows, ideally including AI agents, SDKs or automated code analysis.
• The ability to work closely with software engineers, challenge technical decisions and communicate security risks in a way that helps teams move forward.

I’m particularly interested in engineers who have worked in environments where they’ve been expected to build solutions rather than rely entirely on commercial security products.

This is an experienced hire, not a graduate or entry level position. I’m looking for someone who has spent time solving difficult engineering problems and can demonstrate what they’ve personally designed, built and delivered.

Equally, I’m not looking for someone who has moved completely away from the technology into management. This is a hands on engineering position, and the ability to write code and make complex technical decisions is essential.

$400k-$600k TC.

The role is hybrid in New York City and open to candidates already based in the US.

If you’re a strong software engineer who has developed deep security expertise and still enjoys building, I’d be interested in speaking with you.