AI Security Engineer / Application Security Engineer

Compest Solutions Inc is hiring an AI Security / Application Security Engineer for an onsite contract focused on application, API, cloud, and AI/LLM integration security.

Responsibilities

• Conduct security and privacy design reviews for applications, APIs, cloud services, engineering proposals, and AI integrations.
• Review system architecture and data flows, including access controls, trust boundaries, authentication, authorization, and security safeguards.
• Perform threat modeling for critical services and AI agents, documenting attack surfaces, attack scenarios, attack paths, mitigations, and residual risks.
• Execute hands-on security testing and adversarial testing of AI/LLM agents, covering:
  • Prompt injection
  • Tool misuse and unsafe external integrations
  • Excessive agency
  • Unauthorized data access
  • Permission and access-control issues
  • Sensitive-data exposure
• Identify, validate, and document security vulnerabilities, providing practical remediation recommendations.
• Partner with engineering, security, privacy, and third-party teams to drive fixes and validate implemented security controls.
• Create reusable security assessment assets including methodologies, checklists, threat models, test cases, and reporting templates.
• Support security automation and AI-assisted security workflows when applicable.

Requirements

• 8+ years of professional experience in security engineering, application security, product security, offensive security, systems architecture, or a related technical security field.
• Experience reviewing complex technical designs and identifying security risks in:
  • Applications
  • APIs
  • Cloud services
  • Microservices
  • Distributed systems
• Strong understanding of threat modeling.
• Strong understanding of vulnerability assessment.
• Strong understanding of risk modeling.
• Strong understanding of authentication and authorization.
• Strong understanding of least-privilege principles.
• Strong understanding of data protection.
• Strong understanding of security architecture.
• Hands-on experience with security testing, vulnerability investigation, penetration testing, adversarial testing, or security-control validation.
• Strong technical communication skills for explaining security findings to engineering and business stakeholders.

Technologies

• Python
• Go
• Bash

Location

• Onsite in Seattle, Washington and Sunnyvale, California.
• Local candidates required.

Position Type

• Contract
• In person work location

Visa

• Any Visa Will work

Pay

• Pay rate: $45.00 - $50.00 per hour
• Salary basis: W2 pay rate

Preferred Qualifications

• Experience assessing AI/LLM applications and autonomous AI agents.
• Knowledge of prompt injection, jailbreaks, unsafe tool use, excessive agency, and AI data-security risks.
• Experience with privacy and security design reviews.
• Experience securing cloud environments.
• Security automation experience using Python, Go, Bash, or similar languages.
• Familiarity with application-security frameworks and industry security practices.

Key Skills

• Application Security
• AI/LLM Security
• Threat Modeling
• Penetration Testing
• Adversarial Testing
• Cloud Security
• API Security
• Security Architecture
• Vulnerability Assessment
• Privacy & Data Protection
• Python/Go/Bash
• Security Automation