Senior AI & AppSec CyberSecurity Engineer

In this Senior AI & AppSec CyberSecurity Engineer role, you will help Sweetwater adopt new technology securely by providing AI security oversight, strengthening application security across the software lifecycle, and mentoring engineers to support secure-by-design decisions.

Responsibilities

• Provide security oversight for AI tools, platforms, and AI-powered applications used across the organization, including evaluating new vendors and models before adoption, reviewing supply chain risk, and assessing adversarial robustness while managing data handling and intellectual property considerations.
• Lead Application Security (AppSec) initiatives across the software development lifecycle, including secure code review, threat modeling, and security testing, with an emphasis on leveraging automated tools to improve efficiency and coverage.
• Develop and maintain AI and AppSec security standards and documentation to support audit and regulatory compliance needs across the enterprise.
• Collaborate with software development teams to establish and enforce secure coding standards and testing practices, including standards for reviewing and validating code.
• Support the organization’s risk exception process by performing security review of policy exceptions and unusual use cases in partnership with relevant stakeholders.
• Mentor junior security engineers through technical guidance and support for professional development within the security discipline.
• Identify, triage, and remediate AI governance and application security risks within Sweetwater’s development program in alignment with established service levels.
• Stay current with emerging AI security threats and secure coding practices, updating security frameworks and documentation as needed.

Requirements

• Bachelor’s degree in Computer Science, Information Security, or a related field, or equivalent professional experience.
• 6+ years of cybersecurity experience, including at least 1 year focused on AI/ML security or governance and 3 years focused on application security.
• Demonstrated experience in AI/LLM application security, including prompt injection defense, model risk assessment, and generative AI governance frameworks.
• Proven experience evaluating and governing AI coding agents and AI code assist platforms used across professional software engineering and citizen development contexts.
• Expertise in evaluating and advising on SAST/DAST/SCA scanning practices within CI/CD pipelines.
• Strong understanding of user-developed, low-code/no-code, and shadow IT governance frameworks, including tiered risk models and automated policy enforcement.
• Strong communication and documentation skills, with the ability to translate security concepts for both technical and non-technical audiences.
• Hands-on experience reviewing code and conducting security assessments in real-world development environments.
• Preferred: CSSLP (Certified Secure Software Lifecycle Professional) or GSSP (GIAC Secure Software Programmer).

Technologies

• AI tools; AI-powered applications; AI/ML; AI/LLM application security
• Prompt injection defense; model risk assessment; generative AI governance frameworks
• AI coding agents; AI code assist platforms
• Static application security testing (SAST); dynamic application security testing (DAST); software composition analysis (SCA)
• CI/CD pipelines

Location and Relocation

• Location: Fort Wayne, IN (onsite)
• Relocation requirement: Relocation to Sweetwater’s state-of-the-art campus in Fort Wayne, IN is required

Sweetwater “Ideal” Team-Player

• WOWs The Customer: passion for creating strong customer and colleague experiences.
• Gets Things Done: moves through tasks with a sense of urgency and strong work ethic.
• Obsesses over the Details: commits to careful attention to detail.
• Drives Continuous Improvement: focuses on effective and efficient ways to work and improve.
• Develops the Future: grows personally and professionally and supports colleagues in their development.