Senior AI & App Security Engineer

Job Description

Requirements
- -----------

### Must have:

### - We need hands-on experience reviewing and writing code in one or more modern programming languages. - We expect strong expertise in secure coding, threat modeling, vulnerability management, and Secure SDLC practices. - We require deep familiarity with OWASP Top 10, API security, authentication, authorization, and application-layer defenses. - We look for experience securing cloud-native applications and architectures across multiple cloud platforms, along with designing secure AI and LLM solutions. - We need experience architecting, implementing, and maintaining Cloudflare-based protections, including WAF, API security, DDoS mitigation, and related web application controls. - We value strong communication skills and the ability to influence technical teams and advance security initiatives across the organization. - We expect proven experience guiding secure applications through the full lifecycle, from requirements and architecture through deployment, remediation, and ongoing optimization. - We require a strong understanding of how applications, cloud, network, and infrastructure layers interact so you can build comprehensive security strategies and roadmaps. - We look for experience applying enterprise security architecture principles and governance frameworks, including NIST SP 800-53, NIST CSF 2.0, NIST AI RMF, NIST SP 800-218, and NIST SP 800-207 within application security programs.

Responsibilities:
- ----------------

- We will have you lead application security architecture reviews, threat modeling sessions, vulnerability assessments, and secure design evaluations for web applications, APIs, cloud-native platforms, and AI-enabled solutions. - We will rely on you to shape the vision, roadmap, and operating model for securing applications across integrations, cloud services, infrastructure, and network architecture. - You will partner with technology and business teams to define security standards, identify emerging risks, implement proactive controls, and develop metrics that show risk reduction and program effectiveness. - You will perform secure code reviews and drive remediation of application vulnerabilities. - You will assess and reduce risks tied to Large Language Models, Generative AI, AI agents, and AI-assisted development tools. - You will develop, maintain, and refine application security standards aligned with OWASP Top 10 and industry best practices. - You will use security testing tools, including Burp, to uncover vulnerabilities, verify controls, and support remediation. - You will design, implement, and optimize Cloudflare security services such as WAF, API security, DDoS protection, and Zero Trust capabilities. - You will integrate security controls, automated testing, and policy validation into CI/CD pipelines and DevSecOps workflows. - You will collaborate with engineering teams to secure cloud environments and applications across diverse cloud platforms. - You will serve as a subject matter expert in application security, AI security, cloud security, and secure software development practices. - You will present assessments, risk findings, and strategic recommendations to senior leadership and key stakeholders in clear, actionable terms.
- ------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------

Company:
- -------

We are NFA, a purpose-driven organization that safeguards the integrity of the derivatives markets, protects investors, and helps ensure our Members meet their regulatory obligations. We take pride in doing the right thing, supporting one another, and serving our community. In this Senior AI \& Application Security Engineer role, you will help advance secure-by-design practices across our applications, APIs, cloud platforms, and emerging AI solutions. You will work closely with developers, architects, data, and governance teams to strengthen our security posture while enabling innovation. This is an in-person role with a salary range of $152,950 to $272,000 per year, and our benefits include 401(k), 401(k) matching, dental, health, vision, life insurance, HSA, EAP, paid time off, parental leave, retirement plan, and tuition reimbursement.
- ---------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------