Staff Security Engineer, AI & Application Security

23 minutes ago
Full-time
Lead
Cybersecurity
Marcura

Marcura

Marcura specializes in providing innovative solutions that streamline processes in the maritime industry, focusing on the automation of disbursement accounts, crew and supplier payments, and optimizing time spent in port.

Internet Software & Services
251-1K
Founded 2001

Description

  • Define and maintain a prioritized security roadmap and make clear build-versus-buy decisions.
  • Review system architecture and designs early to embed threat modelling and secure-by-design patterns.
  • Advise product, engineering, data, and operations teams on secure AI adoption and LLM/agentic system design.
  • Build and maintain AI security standards, controls, checklists, and a live inventory of deployed models.
  • Establish and run internal penetration testing and AI red team exercises across applications, APIs, cloud, and internal services.
  • Own and coordinate external penetration testing, partner management, and remediation tracking.
  • Perform hands-on offensive testing against production and pre-production systems.
  • Improve application, cloud, identity, access, and data protection controls through hardening and automation.
  • Own the technical relationship with the MDR provider, including telemetry, detection tuning, and validation.
  • Lead vulnerability management, incident response support, security tooling, reporting, and engineering enablement.

Requirements

  • 8+ years of total experience in security engineering across offensive and defensive work.
  • At least 4 years of hands-on offensive experience leading and executing penetration tests and red team exercises.
  • Demonstrable experience hardening cloud and application environments and building or tuning detections.
  • Proven experience securing LLM or AI systems in production, including prompt injection, jailbreaks, and agent abuse.
  • Experience as a first, sole, or founding security hire, or building security capability with minimal supervision and constrained resources.
  • Track record of influencing architecture and design decisions across engineering and product teams.
  • Experience supporting or leading incident response in a production environment.
  • Experience owning and getting value from an MDR or managed SOC provider.
  • Experience scoping and challenging external penetration tests and turning findings into remediation.
  • Evidence of finding real vulnerabilities in real systems, such as CVEs, bug bounty results, security research, or high-level CTF results.
  • Certifications such as OSCP, OSEP, OSWE, GXPN, CRTO, CISSP, or cloud security specialties are welcome but not required.
  • A degree in Computer Science, Information Security, or Engineering is welcome but not required.
  • Experience in a regulated B2B, fintech, maritime, or logistics environment is preferred.

Benefits

  • Competitive salary and bonus.
  • Inclusive onboarding experience.
  • Wellness support through the Marcura Wellness Zone.
  • Global opportunities within an expanding company.
  • Diverse and supportive work culture with a focus on inclusion and belonging.

Interested in this position?

Apply directly on the company website

Apply Now

Similar Roles

Senior Manager IT Systems

Verkada 1K-5K Professional Services

Verkada is hiring a Senior Manager of IT Systems to lead its IT Systems Engineering team and own corporate cloud, identity, automation, and security infrastructure supporting a rapidly scaling AI-powered platform.

AWS Azure CloudFormation GCP Python Terraform
8 minutes ago

Senior Security Engineer

Cision 5K-10K Professional Services

Cision is hiring a Senior Security Engineer to monitor, investigate, and respond to security activity across cloud, identity, endpoint, and Linux-based environments.

Active Directory AWS Bash GCP Kubernetes Linux PowerShell Python Sentinel SIEM Splunk
23 hours, 8 minutes ago

Senior Network Security Engineer

Paragon Cyber Solutions 11-50 Internet Software & Services

Paragon Cyber Solutions is seeking a Senior Network Security Engineer to design and maintain secure enterprise network architectures across on-premises, cloud, and hybrid environments in support of government and commercial clients.

AWS Azure Cloudflare Cybersecurity Fortinet Network Security SIEM
23 hours, 38 minutes ago

Senior Cloud Security Engineer

Yext 1K-5K Internet Software & Services

Yext is hiring a Senior Cloud Security Engineer to strengthen cloud, container, and product security across AWS and GCP for its AI-driven enterprise marketing platform.

AWS Bash CI/CD CloudFormation DevSecOps Docker GCP Go Kubernetes PowerShell Pulumi Python SIEM Terraform
23 hours, 53 minutes ago

You're on a roll! Sign up now to keep applying.

Sign Up

Already have an account? Log in

Used by 14,729+ remote workers