Security Engineer – Engineering Security

We are Hiring: Security Engineer – Engineering Security

Location: Seattle, WA (Preferred) / Sunnyvale, CA
Duration: 6 Months Contract
Work Model: Full-Time, approximately 40 hours/week
Open Positions: 5

Looking for local candidates only. Candidates with 4–6 years of experience are also welcome.

Key Focus Areas:

• ERD Security and Privacy Reviews

• Threat Modeling

• Third-Party AI Agent Security Testing

• Application and API Security

• Cloud and Distributed Systems Security

• Adversarial Security Testing

Key Responsibilities:

• Conduct security and privacy design reviews for services, applications, APIs, engineering proposals, and AI integrations.

• Perform threat modeling for critical services and AI agents, identifying attack surfaces, threats, attack paths, mitigations, and residual risks.

• Perform hands-on security testing of third-party AI agents, including prompt injection, tool misuse, excessive agency, data access, permissions, external integrations, and sensitive-data exposure.

• Document security findings, risk assessments, evidence, and actionable remediation guidance.

• Collaborate with engineering, security, privacy, and third-party teams to validate remediation.

• Develop repeatable security assessment processes, threat models, test cases, reporting templates, and automation workflows.

Minimum Qualifications:

• 3+ years of professional experience in Security Engineering, Application Security, Product Security, Offensive Security, Systems Architecture, or a related field.

• Experience reviewing technical designs and identifying security risks across applications, APIs, cloud services, microservices, or distributed systems.

• Strong understanding of threat modeling, vulnerability classification, authentication, authorization, least privilege, and data protection.

• Hands-on experience with security testing, vulnerability investigation, penetration testing, adversarial testing, or security control validation.

• Strong communication and collaboration skills with engineering, security, privacy, and third-party teams.

Preferred:

• Experience assessing AI/LLM agents, prompt injection, and unsafe tool use.

• Experience with privacy design reviews and cloud security.

• Security automation experience using Python, Go, Bash, or similar languages.

• Hands-on penetration testing and vulnerability assessment across applications, APIs, cloud infrastructure, and networks.

• Experience identifying real-world attack paths and providing actionable remediation guidance.