AI Security Engineer / Application Security Engineer

Compest Solutions Inc is seeking an experienced AI Security / Application Security Engineer for an onsite contract role supporting application, API, cloud, and AI or LLM integration security. The position emphasizes security and privacy design review, threat modeling, and hands-on adversarial testing of AI agents, with added support for security automation and AI-assisted security workflows.

This role is based in Sunnyvale, CA / Seattle, WA with in-person work requirements and a focus on local candidates. Compensation is USD 45.00 to 50.00 per hour on W2 pay, with contract employment and a minimum of 8 years of relevant experience.

Responsibilities

• Conduct security and privacy design reviews for applications, APIs, cloud services, engineering proposals, and AI integrations.
• Review system architecture and data flows, including access controls, trust boundaries, authentication, authorization, and security safeguards.
• Perform threat modeling for critical services and AI agents, documenting attack surfaces, attack scenarios, attack paths, mitigations, and residual risks.
• Deliver hands-on security and adversarial testing for AI/LLM agents, covering prompt injection, tool misuse, excessive agency, unauthorized data access, permission and access-control issues, external integrations, and sensitive-data exposure.
• Identify, validate, and document security vulnerabilities, including practical remediation recommendations.
• Collaborate with engineering, security, privacy, and third-party teams to drive remediation and validate security controls.
• Develop reusable security assets such as assessment methodologies, checklists, threat models, test cases, and reporting templates.
• Support security automation and AI-assisted security workflows when appropriate.

Requirements

• 8+ years of professional experience in security engineering, application security, product security, offensive security, systems architecture, or a related technical security field.
• Experience reviewing complex technical designs to identify security risks in:
  • Applications
  • APIs
  • Cloud services
  • Microservices
  • Distributed systems
• Strong understanding of threat modeling, vulnerability assessment, and risk modeling.
• Strong understanding of authentication and authorization, including least-privilege principles.
• Strong understanding of data protection and security architecture.
• Hands-on experience with security testing, vulnerability investigation, penetration testing, adversarial testing, or security-control validation.
• Strong technical communication skills to explain security findings to engineering and business stakeholders.

Technologies

• Python
• Go
• Bash

Location and Contract Details

• Onsite in Seattle, Washington and Sunnyvale, California
• Local candidates required
• Position type: Contract
• Pay: $45.00 - $50.00 per hour
• W2 only
• Visa: Any Visa will work

Preferred Qualifications

• Experience assessing AI/LLM applications and autonomous AI agents.
• Knowledge of prompt injection, jailbreaks, unsafe tool use, excessive agency, and AI data-security risks.
• Experience with privacy and security design reviews.
• Experience securing cloud environments.
• Security automation experience using Python, Go, Bash, or similar languages.
• Familiarity with application-security frameworks and industry security practices.