Senior AI AppSec Engineer

“I can be myself at work.”

You are more than a job title. We want you to feel comfortable doing great work and bringing your best, authentic self to everything you do. We value your talents, traditions, and uniqueness—and we’re committed to fostering a strong sense of belonging in a respectful workplace.  

We intentionally seek diverse perspectives, experiences, and backgrounds, investing in a culture designed to celebrate differences. We believe that belonging leads to better outcomes and a stronger community of associates united by our mission. At Capital, we live our core values every day: Integrity, Client Focus, Diverse Perspectives, Long-Term Thinking, and Community. 

 

“I can influence my income.”

 

You want to feel recognized at work. Your performance will be reviewed annually, and your compensation will be designed to motivate and reward the value that you provide. You’ll receive a competitive salary, bonuses and benefits. Your company-funded retirement contribution will factor in salary and variable pay, including bonuses. 

 

“I can lead a full life.”

 

You bring unique goals and interests to your job and your life. Whether you’re raising a family, you’re passionate about where you volunteer, or you want to explore different career paths, we’ll give you the resources that can set you up for success. 

• Enjoy generous time-away and health benefits from day one, with the opportunity for flexible work options
• Receive 2-for-1 matching gifts for your charitable contributions and the opportunity to secure annual grants for the organizations you love
• Access on-demand professional development resources that allow you to hone existing skills and learn new ones

“I can succeed as a Senior AI AppSec Engineer at Capital Group”

As a Senior AI AppSec Engineer, you will work with application teams to ensure the security of custom and procured AI solutions. You will help enable Capital Group’s AI strategy by building and/or procuring solutions to protect a diverse set of enterprise AI platforms being built and deployed at Capital Group.

You’ll collaborate with platform engineering, security engineering, and risk teams to ensure their solutions support scalable, secure adoption of AI.   You will use agentic tooling to review code, build data flow diagrams, establish threats and countermeasures funneling to application teams as security requirements.

Additionally, you’ll be advising diverse teams across the organization, and promoting AI Security principles across Capital Group.

• Secure AI Development Lifecycle: You will procure and/or build technical solutions to embed automated security checks into the AI SDLC and ML-Ops.
• AI Threat Modeling: You will threat model complex Agentic and AI systems and design security requirements collaboratively with developers, architects and business stakeholders
• Code analysis: You will review code for security vulnerabilities in the context of AI-driven systems
• Contribute to Standards and Policies: You will provide thought leadership for Information Security policies and standards for AI in collaboration with technology risk
• AI/Agent SME: You will provide AI/Agent subject matter expertise for AI Incidents and Security Reviews, and help develop incident response playbooks for AI-related security incidents

“I am the person Capital Group is looking for.”

We recognize that strong candidates may not meet every preferred qualification. If your experience is related and you believe you can contribute to this work, we encourage you to apply.

• You have 8+ years of relevant experience in information security, with depth in one or more areas such as application security, platform security, penetration testing, DevSecOps, or network security. Equivalent experience gained through related technical roles or demonstrable security leadership will also be considered.
• You have strong knowledge of security of safety risks of Large Language Models and AI Agents (OWASP for LLM Top 10, MITRE ATLAS, NIST RMF, etc.)
• You have 5+ Years of experience automating security checks, including SAST, SCA, and DAST, directly into CI/CD pipelines
• You have extensive experience with STRIDE/other threat modeling frameworks, agile workflows, including Scrum and Kanban
• You are experienced in at least one programming languages (Python, Java, .NET)
• You can effectively partner and collaborate with stakeholder teams.
• You have effective communication skill…