Abnormal AI
Application Security Engineer II
Remote, United States· REMOTE
About the role
The engineer leads threat modeling and architecture reviews for AI-powered features and builds security tooling and CI/CD integrations. The role also designs automated security testing, supports incident analysis and coaches developers on secure coding for AI-native systems.
What you will do
- Lead threat modeling and architecture reviews for AI features
- Build security tooling and CI/CD integrations
- Design automated security testing
- Support incident response analysis
- Coach developers on secure coding
What they ask for
- 5+ years in application security engineering
- Experience securing AI/ML systems or ability to learn prompt-injection and agentic risks quickly
- Strong programming in Python, Go, Java or JS/TS
- Web security: OWASP Top 10, authentication, cryptography, secure API design
- Hands-on threat modeling and architecture review
- Remote within the US
Nice to have
- Startup experience
- Commercial AppSec tools (Veracode, Checkmarx, SonarQube)
- Vulnerability management or security telemetry
- SOC 2 / ISO 27001
- Bug bounty program exposure
What applying with Rooted means
This role accepts applications with Rooted context. Instead of sending only a resume, you can attach a verifiable credential with your proofs, rank, and technical evidence.
Your application includes your Rooted credential: rank, verified proofs, and supporting evidence.
You can read this role without an account. To apply you need a Rooted credential.
This role is curated by Rooted. Rooted is not the hiring company unless explicitly stated. The hiring company is Abnormal AI. Confirm the final details with the original source or during the application process.
Posted 2026-08-07