RemoteLeaf Logo
Log in Sign up

Lead Security Engineer - Penetration Testing & AI Security

1 month ago
India
Full-time
Lead
Application Security Engineer
Artificial Intelligence and Machine Learning
Bash CI/CD Cybersecurity DevSecOps Docker Go JavaScript JWT Kubernetes Microservices OpenID Connect OWASP Penetration Testing Python SAML
Apply Now
HighLevel

HighLevel

HighLevel provides an all-in-one sales and marketing platform that agencies can white label and resell, offering tools and resources designed to help businesses consolidate their marketing efforts and achieve their growth objectives.

Internet Software & Services
251-1K
Founded 2018
$60M raised
View All Jobs 76

Description

  • Lead application security initiatives across web, mobile, API, microservices, and cloud-native products.
  • Conduct architecture reviews, threat modeling, secure code reviews, penetration testing, and hands-on security assessments.
  • Identify and remediate risks involving authentication, authorization, tenant isolation, business logic, data protection, and API security.
  • Define security standards, engineering guardrails, secure design patterns, and DevSecOps requirements.
  • Improve CI/CD security testing using SAST, DAST, SCA, secret scanning, container scanning, and Infrastructure as Code scanning.
  • Lead security reviews and adversarial testing for LLM applications, AI agents, RAG systems, machine learning services, and AI integrations.
  • Test AI risks including prompt injection, jailbreaking, data disclosure, insecure tool use, excessive agency, model abuse, and supply-chain threats.
  • Develop repeatable AI security methodologies, playbooks, automation, and test cases using tools such as Garak or PyRIT.
  • Produce security reports with evidence, risk ratings, business impact, and remediation guidance.
  • Collaborate with engineering, product, infrastructure, and AI/ML teams while mentoring engineers and promoting security awareness.

Requirements

  • 8+ years of cybersecurity experience in application security, product security, penetration testing, or security engineering.
  • 1–3 years of AI Security experience involving AI/ML security, adversarial testing, or security-focused AI research.
  • Experience with threat modeling, architecture reviews, secure code reviews, penetration testing, and vulnerability validation.
  • Strong knowledge of web, mobile, API, cloud-native, OWASP, and business-logic security.
  • Knowledge of OAuth 2.0, OIDC, JWT, SAML, and modern access-control models.
  • Hands-on DevSecOps experience with CI/CD security automation, SAST, DAST, SCA, secret scanning, containers, and Infrastructure as Code.
  • Practical experience with Docker, Kubernetes, microservices, and cloud security.
  • Experience securing or assessing LLM applications, RAG systems, AI agents, machine learning models, or AI-enabled products.
  • Familiarity with OWASP LLM guidance, MITRE ATLAS, NIST AI RMF, and AI security threats.
  • Programming or scripting proficiency in Python, Go, JavaScript, Bash, or a similar language; strong written and verbal communication skills.
  • Preferred: SaaS application security leadership, AI red teaming, security automation, security research, open-source or bug bounty contributions, or certifications such as OSCP, OSWE, GWAPT, GIAC, CISSP, or an AI Security credential.

Benefits

  • Remote-first work environment.
  • Equal opportunity employer.
  • Global team spanning 15+ countries.

Interested in this position?

Apply directly on the company website

Apply Now

Similar Roles

Zyte

Senior Reverse Engineer - Remote

Zyte 251-1K Professional Services

Zyte is hiring a Reverse Engineer to develop scalable tooling, automation, and AI-assisted pipelines that help engineers analyze evolving antibot and browser-fingerprinting systems and ship solutions faster.

Poland Full-time Senior Penetration Tester
Burp Suite C C++ JavaScript LLM Machine Learning Node.js Python Rust Wireshark
1 day, 5 hours ago
DoorDash

Manager, Third-Party Risk Management (TPRM)

DoorDash 10K-50K Air Freight & Logistics

DoorDash is hiring a US-based Third-Party Risk Management Manager to lead its global vendor security risk program, manage TPRM teams, and build AI-enabled workflows across DoorDash, Wolt, and Deliveroo.

United States Full-time Senior Penetration Tester
$164k-$242k
CI/CD Encryption OAuth OpenID Connect Penetration Testing Python SAML Secrets Management SQL
2 days, 4 hours ago
Chainguard

Senior Product Security Engineer

Chainguard 51-250 Internet Software & Services

Chainguard is hiring a security engineer to embed secure software supply chain practices into CI/CD and cloud-native product development, reducing risk across its Kubernetes, cloud, and open source software stack.

United States Full-time Senior Application Security Engineer
$157k-$184k
AWS CI/CD GCP GitHub Actions Go Kubernetes OWASP Penetration Testing Python Secrets Management Tekton
4 days, 5 hours ago
Aspenview Technology Partners

Incident Response Lead

Aspenview Technology Partners Internet Software & Services

AspenView Technology Partners is hiring a US-based Incident Response Lead to direct major incident response and digital forensics for a large consumer lender supported by nearshore security operations teams.

United States Full-time Lead Penetration Tester
AWS Azure Elasticsearch GCP Linux SIEM Splunk
5 days, 4 hours ago

You're on a roll! Sign up now to keep applying.

Sign Up

Already have an account? Log in

Used by 14,729+ remote workers