Description

Role Overview

STAFFXPERT is looking  for an Application Security Engineer with strong Threat & Vulnerability Management / DevSecOps experience and exposure to AI/LLM security. The consultant will help secure AI applications, agentic systems, and modern software development pipelines.

Key Responsibilities

Implement and manage SAST, DAST, SCA and application security tools within CI/CD pipelines.

Build and maintain secure SDLC / DevSecOps controls.

Perform threat modeling and security architecture reviews for AI/LLM applications.

Identify and manage application vulnerabilities and coordinate remediation.

Define vulnerability management standards, priorities, and remediation SLAs.

Assess AI/LLM and Agentic AI security risks, including emerging attack vectors.

Support AI supply-chain security, SBOM, open-source libraries, models, plugins, and third-party AI services.

Develop security standards, policies, and secure coding guidance.

Partner with engineering, platform, AI, and security teams.

Support security assessments, audits, and compliance activities.

Required Experience

5+ years in Application Security, DevSecOps, Product Security, or Vulnerability Management.

Strong hands-on experience with:

SAST / DAST / SCA

CI/CD security

Application vulnerability management

Threat modeling

Security architecture reviews

Strong understanding of secure SDLC and DevSecOps.

Experience with cloud, containers, APIs, and cloud-native architectures.

Knowledge of:

OWASP Top 10

OWASP API Security Top 10

OWASP LLM Top 10

OWASP Agentic AI security

Understanding of AI/LLM attack surfaces and security risks.

Experience with SBOM and software supply-chain security.

Ideal Candidate

Application Security + DevSecOps + Vulnerability Management + AI/LLM Security + SAST/DAST/SCA + Threat Modeling + Cloud/CI/CD

Key Skills

Education

Any Graduate