Application Security Engineer

Senior Application Security Engineer with Hands on Python

Location- Princeton, NJ & NYC, NY (Hybrid)

• 8-15+ years in software engineering and application security, with substantial hands-on development experience (not security-adjacent — you've shipped code).
• Strong Python for automation and tooling.
• Proficiency with Claude Code — you use it daily and know your way around its extensibility (skills, subagents, hooks, slash commands, and MCP integrations) to build reusable security workflows and automation, with a clear-eyed view of its strengths and failure modes.
• Working understanding of AI agents and agentic frameworks, and the emerging security concerns around them (OWASP LLM Top 10, agent tool permissions, prompt injection, supply-chain risk in model/tooling).
• Depth in secure SDLC, threat modeling, and common vulnerability classes (OWASP Top 10, API security, authn/authz).
• The judgment to know when to automate, when to escalate, and when to just fix it yourself.

Nice to have

• Experience securing production LLM/agentic systems or building internal AI security tooling.
• Contributions to open-source security tools.
• Relevant certifications (OSCP, GWAPT, CSSLP) — helpful, not required.