Draper, UT

Cybersecurity Jobs in Draper, UT

2 jobs found

Include remote jobs

Today

Staff Application Security Engineer

BambooHR Draper, UT 🇺🇸 Remote

Draper, UT

Today

Full time Agentic Ai Security Agentic Integrations Ai Agent Security

Apply Now

Job Description

BambooHR is hiring a Staff Application Security Engineer to lead application security for AI features and agentic systems, with a focus on standards, reviews, and SDLC integration.

Responsibilities

Lead security reviews and threat models for AI features and agentic systems, including autonomous agents, MCP servers, and third-party integrations
Maintain and update review playbooks and quality criteria as threat landscapes evolve
Set BambooHR security standards for AI agents covering:
- Identity and delegated authorization
- Tenant- and user-scoped data access
- Safe handling of tool output
- Tool supply chain risk
- Human-approval requirements
Own agent designs used by the security team for validation, triage, review assistance, and remediation
Build and ship agent-assisted capabilities with clear evaluation criteria, bounded permissions, and human approval gates for high-impact actions
Support developers and security champions with self-serve guidance and tooling, and advocate for engineering investment needed to operationalize work
Embed AppSec requirements into the SDLC with design-time and release-time gates for AI features
Make agent-assisted code review, finding validation, and fix suggestions a default part of CI/CD pipelines with blocking criteria and a fast exception path
Run AppSec programs across teams and quarters by setting goals, milestones, and success metrics; managing a lightweight intake and prioritization cadence; coordinating dependencies across engineering, product, and operations; and reporting progress, risks, and tradeoffs to leadership
Represent AppSec in architecture forums, harmonize security requirements to reduce duplicated effort, serve as an escalation point, and coach leaders on security tradeoffs
Partner with Legal, Privacy, and GRC to apply AI governance through guardrails and automation, including for emerging AI regulations
Train and coach software engineers and engineering teams on secure design and threat modeling, with emphasis on authentication, authorization, multi-tenancy, and AI features
Mentor security engineers on technical direction and career growth; close skill gaps through onboarding, training, and mentorship
Participate in an on-call rotation as needed to support incident response and resolve escalated security issues

Requirements

Bachelor’s degree in Computer Science, Information Security, or related field, or equivalent practical experience
8+ years of experience in security, including 5+ years hands-on application security experience
Experience securing multi-tenant SaaS platforms, including tenant isolation
Cloud and infrastructure security experience (e.g., AWS, Azure, GCP)
Hands-on experience building AI agents or agentic workflows, including concrete examples of permissions, failures, and validation (production systems, internal tools, personal or open-source projects, and substantial prototypes all count)
Demonstrated ability to evaluate security of AI and agentic systems, including:
- Prompt injection
- Tool and context poisoning
- Excessive agency
- Delegated authorization
- Data leakage
- Supply-chain risk in models and tools
Familiarity with OWASP Top 10 for LLM Applications, OWASP Top 10 for Agentic Applications, or comparable frameworks
Ability to design evaluations for agentic workflows covering task success, false positives and negatives, adversarial cases, and regression checks
Proven experience leading threat modeling (e.g., STRIDE, attack trees) and design reviews for complex applications and APIs
Deep understanding of web application and API security, including authentication and authorization (OAuth 2.0 scopes and delegation, OpenID Connect, token audience and validation), session management, and access control models
Strong software engineering skills in at least one language (e.g., Python, TypeScript, PHP), including testing and maintaining tools others depend on
Track record of influencing without authority through cross-team initiatives, business cases, and clear communication of technical risk to engineering, product, legal, and leadership audiences
Experience mentoring engineers, formally or informally
Sound judgment in ambiguous situations, including the ability to explain tradeoffs, recommend mitigations, and bring risk-acceptance decisions to the right owner

Technologies

AWS
Azure
GCP
Python
TypeScript
PHP
OAuth 2.0
OpenID Connect
OWASP Top 10 for LLM Applications
OWASP Top 10 for Agentic Applications
STRIDE
MCP servers

Benefits

Comprehensive health, life, and disability insurance
Generous leave policies including 4 weeks of vacation, 12 company holidays, parental leave, and volunteer time off
401k plans with up to 6% company match
$2000 Paid-Paid Vacation bonus
EAP through Headspace

What Would Make You Stand Out

Experience securing MCP servers and gateways
Experience securing AI coding assistants or developer agent tooling at organizational scale, or integrating AI-driven security checks into CI/CD pipelines
Familiarity with AI governance and SaaS compliance frameworks (e.g., NIST AI RMF, ISO/IEC 42001, EU AI Act, SOC 2, ISO 27001)
Relevant security certifications (e.g., CSSLP, OSWE, GWAPT)
Experience building or running security champions programs, such as recruiting and training champions or embedding security advocates in engineering teams

Location and Employment Notes

Location: Draper, UT (remote)
This is a remote position available in the state listed on the job
Employment with BambooHR is contingent on passing both a background and credit check

View full job page →

1mo ago

Sr. Staff AI Security Engineer

Bill.com Draper, UT 🇺🇸 Remote

Draper, UT

1mo ago Closed

$165k - $207k/yr Full time Ai Enabled Security Ai Security Data Security

This position is no longer accepting applications (closed Oct 25, 2026).

Job Description

Bill.com is hiring a Sr. Staff AI Security Engineer to help lead the secure deployment and ongoing operation of AI and ML systems. In this role, you will focus on hardening LLM usage and the orchestration layers that connect models, policies, and services, using concrete security controls, red-teaming, and a risk-based roadmap aligned to OWASP’s guidance.

This position is based in Draper, UT (remote), with an annual salary range of USD 165,200 - 206,600. The San Jose, pay range listed for this role is $194,300 - $243,000 USD.

What you’ll do

Design, build, and operate secure AI gateways and policy orchestration layers across multiple AI models and service providers
Configure end point settings for AI tools in collaboration with IT end point management solutions
Stand up and lead a formal AI red-teaming practice covering prompt injection, jailbreaking, model extraction, and emerging attack vectors
Identify and mitigate AI-specific threats across input manipulation, model supply chain risks (model weights, datasets, third-party AI libraries), data privacy risks (training data leakage and PII disclosure), and model integrity threats (poisoning and unauthorized fine-tuning)
Automate security checks and guardrails to support rapid development cycles while maintaining security posture
Apply and operationalize the OWASP LLM Top 10 framework to categorize and mitigate risk
Own the AI security roadmap and advise senior leadership on AI risks and safe adoption
Work as a partner with platform teams to help cultivate a collaborative security culture
Mentor fellow engineers on AI security best practices
Document and report vulnerabilities with clear remediation guidance and technical direction

What you bring

A proven track record of building and scaling security systems in high-growth environments
High proficiency in Python or Go to build, automate, and scale security tooling
Deep understanding of LLM-specific attack vectors, including prompt injection and jailbreaking
Deep understanding and applied experience with the OWASP LLM Top 10 framework
Experience designing secure API gateways, orchestration layers, and scalable security infrastructure using infrastructure as code
Experience standing up red-teaming or adversarial testing programs
A strong grasp of AI/ML fundamentals, including model supply chain and data privacy risks
A builder mindset focused on enabling development through secure architecture rather than blocking it
The ability to influence senior leadership and mentor engineers across the organization
Background in Computer Science, Cybersecurity, or a related technical field

Technologies you’ll work with

Python
Go
OWASP LLM Top 10
Infrastructure as code
AI/ML
LLMs

Benefits

100% paid employee health, dental, and vision plans (choose HMO, PPO, or HDHP)
HSA & FSA accounts
Life Insurance, Long & Short-term disability coverage
Employee Assistance Program (EAP)
11+ Observed holidays and wellness days and flexible time off
Employee Stock Purchase Program with employee discounts
Wellness & Fitness initiatives
Employee recognition and referral programs
Medical, dental, vision, life and disability insurance
401(k) retirement plan
Flexible spending & health savings account
Paid holidays
Paid time off
Other company benefits

Visa sponsorship

This position is not eligible for visa sponsorship. Applicants must have authorization to work in the United States without requiring visa sponsorship now or in the future.

View full job page →

Cybersecurity Jobs in Draper, UT

Staff Application Security Engineer

Sr. Staff AI Security Engineer

Get Cybersecurity Jobs in Draper, UT alerts