AI Security Engineer / Application Security Engineer

Compest Solutions Inc is seeking an experienced AI Security / Application Security Engineer for an onsite contract engagement across Seattle, WA and Sunnyvale, CA. The role centers on securing applications and AI/LLM agent integrations through threat modeling, security design reviews, and hands-on adversarial testing.

Location and Employment Details

• Location: Onsite in Seattle, Washington and Sunnyvale, California (local candidates required)
• Job type: Contract
• Compensation: USD 50–55 per hour

Core Responsibilities

• Conduct security and privacy design reviews for applications, APIs, cloud services, engineering proposals, and AI integrations.
• Review system architecture and key controls across data flows, access controls, trust boundaries, authentication, authorization, and security safeguards.
• Perform threat modeling for critical services and AI agents, including attack surface identification, attack scenarios and paths, mitigations, and residual risk documentation.
• Execute hands-on security and adversarial testing for AI/LLM agents, including:
  • Prompt injection
  • Tool misuse
  • Excessive agency
  • Unauthorized data access
  • Permission and access-control issues
  • External integrations
  • Sensitive-data exposure
• Identify, validate, and document security vulnerabilities, and provide practical remediation recommendations.
• Partner with engineering, security, privacy, and third-party teams to drive remediation and validate security controls.
• Develop reusable security assessment methods such as checklists, threat models, test cases, and reporting templates.
• Support security automation and AI-assisted security workflows where appropriate.

Required Qualifications

• 8+ years of professional experience in security engineering, application security, product security, offensive security, systems architecture, or a related technical security discipline.
• Experience reviewing complex technical designs and identifying security risks in:
  • Applications
  • APIs
  • Cloud services
  • Microservices
  • Distributed systems
• Strong understanding of threat modeling, vulnerability assessment, and risk modeling.
• Strong understanding of authentication and authorization and least-privilege principles.
• Strong understanding of data protection and security architecture.
• Hands-on experience with security testing, vulnerability investigation, penetration testing, adversarial testing, or security-control validation.
• Strong technical communication skills to explain security findings to engineering and business stakeholders.

Preferred Qualifications

• Experience assessing AI/LLM applications and autonomous AI agents.
• Knowledge of prompt injection, jailbreaks, unsafe tool use, excessive agency, and AI data-security risks.
• Experience conducting privacy and security design reviews.
• Experience securing cloud environments.
• Security automation experience using Python, Go, Bash, or similar languages.
• Familiarity with application-security frameworks and industry security practices.

Technologies

• Python
• Go
• Bash

Key Skills

• Application Security
• AI/LLM Security
• Threat Modeling
• Penetration Testing
• Adversarial Testing
• Cloud Security
• API Security
• Security Architecture
• Vulnerability Assessment
• Privacy & Data Protection
• Python/Go/Bash
• Security Automation

Experience Notes

• AI Security Engineer: 10 years (Preferred)
• Application Security Engineer: 10 years (Preferred)
• Cloud services: 10 years (Preferred)
• APIs: 10 years (Preferred)
• AI/LLM integration: 10 years (Preferred)
• Python: 10 years (Preferred)
• Go: 10 years (Preferred)
• Threat modeling: 10 years (Preferred)
• Vulnerability assessment: 10 years (Preferred)
• Penetration testing: 10 years (Preferred)
• Adversarial testing of AI agents: 10 years (Preferred)
• Security architecture reviews: 10 years (Preferred)