RemoteLeaf Logo
Log in Sign up

Lead Security Engineer - Penetration Testing & AI Security

4 weeks ago
India
Full-time
Lead
Application Security Engineer
Artificial Intelligence and Machine Learning
Bash CI/CD Cybersecurity DevSecOps Docker Go JavaScript JWT Kubernetes Microservices OpenID Connect OWASP Penetration Testing Python SAML
Apply Now
HighLevel

HighLevel

HighLevel provides an all-in-one sales and marketing platform that agencies can white label and resell, offering tools and resources designed to help businesses consolidate their marketing efforts and achieve their growth objectives.

Internet Software & Services
251-1K
Founded 2018
$60M raised
View All Jobs 78

Description

  • Lead application security initiatives across web, mobile, API, microservices, and cloud-native products.
  • Conduct architecture reviews, threat modeling, secure code reviews, penetration testing, and hands-on security assessments.
  • Identify and remediate risks involving authentication, authorization, tenant isolation, business logic, data protection, and API security.
  • Define security standards, engineering guardrails, secure design patterns, and DevSecOps requirements.
  • Improve CI/CD security testing using SAST, DAST, SCA, secret scanning, container scanning, and Infrastructure as Code scanning.
  • Lead security reviews and adversarial testing for LLM applications, AI agents, RAG systems, machine learning services, and AI integrations.
  • Test AI risks including prompt injection, jailbreaking, data disclosure, insecure tool use, excessive agency, model abuse, and supply-chain threats.
  • Develop repeatable AI security methodologies, playbooks, automation, and test cases using tools such as Garak or PyRIT.
  • Produce security reports with evidence, risk ratings, business impact, and remediation guidance.
  • Collaborate with engineering, product, infrastructure, and AI/ML teams while mentoring engineers and promoting security awareness.

Requirements

  • 8+ years of cybersecurity experience in application security, product security, penetration testing, or security engineering.
  • 1–3 years of AI Security experience involving AI/ML security, adversarial testing, or security-focused AI research.
  • Experience with threat modeling, architecture reviews, secure code reviews, penetration testing, and vulnerability validation.
  • Strong knowledge of web, mobile, API, cloud-native, OWASP, and business-logic security.
  • Knowledge of OAuth 2.0, OIDC, JWT, SAML, and modern access-control models.
  • Hands-on DevSecOps experience with CI/CD security automation, SAST, DAST, SCA, secret scanning, containers, and Infrastructure as Code.
  • Practical experience with Docker, Kubernetes, microservices, and cloud security.
  • Experience securing or assessing LLM applications, RAG systems, AI agents, machine learning models, or AI-enabled products.
  • Familiarity with OWASP LLM guidance, MITRE ATLAS, NIST AI RMF, and AI security threats.
  • Programming or scripting proficiency in Python, Go, JavaScript, Bash, or a similar language; strong written and verbal communication skills.
  • Preferred: SaaS application security leadership, AI red teaming, security automation, security research, open-source or bug bounty contributions, or certifications such as OSCP, OSWE, GWAPT, GIAC, CISSP, or an AI Security credential.

Benefits

  • Remote-first work environment.
  • Equal opportunity employer.
  • Global team spanning 15+ countries.

Interested in this position?

Apply directly on the company website

Apply Now

Similar Roles

Chainguard

Senior Product Security Engineer

Chainguard 51-250 Internet Software & Services

Chainguard is hiring a security engineer to embed secure software supply chain practices into CI/CD and cloud-native product development, reducing risk across its Kubernetes, cloud, and open source software stack.

United States Full-time Senior Application Security Engineer
$157k-$184k
AWS CI/CD GCP GitHub Actions Go Kubernetes OWASP Penetration Testing Python Secrets Management Tekton
8 minutes ago
Aspenview Technology Partners

Incident Response Lead

Aspenview Technology Partners Internet Software & Services

AspenView Technology Partners is hiring a US-based Incident Response Lead to direct major incident response and digital forensics for a large consumer lender supported by nearshore security operations teams.

United States Full-time Lead Penetration Tester
AWS Azure Elasticsearch GCP Linux SIEM Splunk
23 hours, 8 minutes ago
Invicti

Staff Security Researcher (Europe Remote)

Invicti 251-1K Internet Software & Services

Invicti Security is hiring a hands-on Offensive Security Researcher in Europe to research emerging web, cloud, and AI threats and turn findings into accurate, production-ready detection capabilities.

Europe Full-time Lead Penetration Tester
Burp Suite GraphQL HTTP JavaScript Kubernetes Nmap Python REST API
1 day ago
GuidePoint Security

Director, OT/IoT Security Services- Remote (Anywhere in the U.S.)

GuidePoint Security 251-1K Internet Software & Services

GuidePoint Security is seeking a Director of OT/IoT Security Services to lead its industrial cybersecurity practice, overseeing its team, service portfolio, delivery quality, client engagements, and financial performance.

United States Full-time Executive Penetration Tester
Cybersecurity
2 days, 22 hours ago

You're on a roll! Sign up now to keep applying.

Sign Up

Already have an account? Log in

Used by 14,729+ remote workers