Application Security Engineer

Reveal is seeking an Application Security Engineer (AI Governance & Cloud Security) to secure application development and responsible AI adoption across code, AI agents/models, and cloud posture.

Responsibilities

• Run threat modeling and secure design reviews for new features, services, and integrations.
• Conduct manual code review and triage findings from SAST, DAST, SCA, and secrets scanning.
• Embed security checks into CI/CD pipelines while maintaining delivery speed.
• Lead remediation with engineering teams and track findings to closure against SLAs.
• Support penetration tests, bug reports, and customer security questionnaires.
• Own the Onyx Security platform as the control plane for AI agents and models across SaaS, cloud, endpoints, and code.
• Use Onyx AI Observability to find sanctioned and shadow AI, and review prompts, responses, and agent actions.
• Write and enforce natural-language governance policies and real-time guardrails in Onyx.
• Manage agent permissions and secure MCP server connections to prevent over-privileged access.
• Detect and respond to prompt injection, data exfiltration, and AI misuse; tune Onyx Guardian Agent remediation.
• Maintain AI acceptable-use policy, AI inventory, and risk assessments with GRC, mapped to NIST AI RMF and ISO/IEC 42001.
• Evaluate new AI tools, agents, and vendors before adoption; report AI adoption and risk metrics to leadership.
• Own Wiz configuration, integrations, policies, and alert routing across cloud accounts.
• Triage Wiz Issues, including toxic combinations, and drive fixes for misconfigurations, vulnerabilities, and exposed secrets.
• Use Wiz Code and IaC scanning to identify risk in repositories and Terraform before deployment.
• Use Wiz AI Security Posture Management (AI-SPM) to inventory AI services and models running in the cloud.
• Build reports and dashboards covering cloud risk trends for Security leadership and audits.
• Perform other duties as assigned to support team, department, and organizational goals.

Requirements

• 4+ years in application security, product security, or security engineering.
• Strong knowledge of OWASP Top 10, OWASP Top 10 for LLM Applications, and agentic AI risks, including Model Context Protocol (MCP) security.
• Ability to read and review code in at least one: Python, JavaScript/TypeScript, Java, or C#.
• Experience securing AWS, Azure, or GCP workloads, containers, and Kubernetes.
• Familiarity with CI/CD tooling (GitHub Actions, GitLab CI, or Azure DevOps) and infrastructure as code.
• Clear written communication for engineers, leadership, and auditors.

Preferred Experience

• Experience building an AI governance program (AI inventory, model risk reviews, acceptable-use policy).
• Hands-on experience with Wiz: policy tuning, Issue triage, and integrations (Jira, Slack, SIEM).
• Hands-on experience with Onyx Security or a comparable AI security and governance platform, including AI discovery, guardrails, and agent permissions.
• Knowledge of NIST AI RMF, ISO/IEC 42001, and the EU AI Act.
• Experience supporting SOC 2, ISO 27001, or FedRAMP audits.
• Background in legal tech, eDiscovery, or other environments handling sensitive client data.
• Scripting for automation (Python, Bash, Ruby) and experience with the Wiz API.
• Certifications such as OSWE, GWAPT, CSSLP, CCSP, or AWS Security Specialty, or Wiz certifications.

Technologies

• Onyx Security
• Wiz
• Onyx AI Observability
• Onyx Guardian Agent
• MCP (Model Context Protocol)
• SAST, DAST, SCA
• CI/CD pipelines
• GitHub Actions, GitLab CI, Azure DevOps
• Python, JavaScript/TypeScript, Java, C#
• AWS, Azure, GCP
• Kubernetes
• Terraform
• Wiz Code
• Wiz AI Security Posture Management (AI-SPM)
• NIST AI RMF, ISO/IEC 42001
• EU AI Act
• Jira, Slack, SIEM

Benefits

• 401k match program
• Comprehensive health benefits (Medical, Dental, Vision, and HSA/FSA)
• Group Term Life Insurance and Voluntary Life Insurance option
• Paid holidays
• Paid vacation, sick, and personal days
• FSA dependent care benefit
• Childbirth recovery and bonding leave policies
• Short and long-term disability benefits
• Access to onsite gym and recreational area at the Chicago office
• Friendly, collaborative, in-office work environment with ample opportunity for professional development

Role Details

• Location: Chicago/U.S. (hybrid)
• Salary: USD 136,000 - 160,000 per year
• Experience: 4+ years
• Hybrid model: 4 days in office, 1 day work from home for candidates residing in Illinois
• Out-of-Illinois candidates may be considered for a remote work arrangement