A

Abnormal Security

AI-driven email threat detection and prevention

Application Security Engineer 2

Security Engineering & ArchitectureConfirmed live in the last 24 hours
Full-timeRemote in USARemote

About the Job

Requirements

  • At least 5 years of experience in application security engineering, ideally securing AWS or comparable cloud-native environments with modern development practices.
  • Experience securing AI/ML-powered systems, or the ability to quickly learn about prompt injection, model supply chain, and agentic-workflow risks.
  • Strong programming skills in Python, Go, Java, or JavaScript/TypeScript, including writing and reading production code.
  • Expertise in web application security, including OWASP Top 10, authentication and authorization, cryptography, secure API design, and securing microservices, containers, and cloud-native architectures.
  • Hands-on experience with threat modeling and conducting security architecture reviews.
  • Ability to influence and collaborate with engineering, DevOps, and product teams, with strong written communication.

Responsibilities

  • Lead threat modeling and security architecture reviews with engineering teams, translating security risks into concrete development actions, particularly for AI-powered features such as LLM integrations, agentic workflows, and MCP connectors.
  • Architect, build, and maintain security tooling and integrations that make secure development the default in CI/CD pipelines.
  • Design and deploy automated security testing to identify vulnerabilities early in the development process.
  • Contribute hands-on during security incidents by analyzing application-level behavior and enhancing response processes.
  • Coach developers on secure coding, security architecture, and threat modeling for AI-native systems.
  • Define and track key security posture metrics, building dashboards or reports to visualize security coverage and vulnerability trends.
  • Own security architecture and the development of secure coding practices, and partner with engineering stakeholders to make security foundational.

Desired Qualifications

  • Experience working in fast-paced or startup environments and defining scope in a growing security program.
  • Hands-on experience with commercial security tools such as Veracode, Checkmarx, SonarQube, Wiz, Semgrep, and Burp Suite.
  • Prior experience building security telemetry pipelines or vulnerability management frameworks.
  • Exposure to compliance frameworks such as SOC 2 and ISO 27001, and understanding how development decisions affect auditability.
  • Familiarity with bug bounty programs and vulnerability disclosure processes.

About the Company

Abnormal Security

AI-driven email threat detection and prevention

Abnormal Security provides AI-driven email security for large enterprises to prevent phishing, malware, and business email compromise. Its platform analyzes emails using machine learning to detect suspicious patterns and behaviors in real time, stopping threats before they reach users. The product integrates with existing email systems via an API, allowing quick deployment with minimal disruption. The company differentiates itself by focusing on sophisticated, modern threats that bypass traditional defenses, backed by a leadership team with deep AI, ML, and enterprise security experience, and by offering a subscription model that supports continuous protection and updates. The goal is to help organizations securely communicate by continuously detecting and blocking email-based attacks and staying ahead of attackers through ongoing research and development and growth.

Company size
1,001-5,000
Company stage
Series D
Total funding
$534M
Headquarters
Las Vegas, NV
Founded
2018

Recently Posted Jobs

Explore more opportunities at Abnormal Security

See more jobs