Staff Security Engineer (AI-Driven Security Assurance)

Quick Facts

• Role: Staff Security Engineer (AI-Driven Security Assurance)
• Focus: AI-powered security assurance integrated into spec-driven development and the SDLC

Description

Build and deploy AI-powered security assurance systems that automate and augment security design reviews, threat modeling, and architectural risk assessments. You will develop agentic workflows using large language models, retrieval, and persistent organizational context to identify and prevent meaningful security risks. You’ll also define how security is embedded into spec-driven development—covering requirements, abuse cases, trust boundaries, controls, and verification criteria—across the specification-to-testing lifecycle.

Responsibilities

• Architect, develop, and deploy AI-powered security assurance systems for security design review, threat modeling, and risk assessment
• Define and implement security practices for spec-driven development (security requirements, abuse cases, threat models, trust boundaries, control objectives, acceptance criteria)
• Integrate security analysis and verification into the SDD lifecycle across specification, design, implementation, testing, and change review
• Build agentic workflows to analyze complex architectures/specifications, reason about threats, identify vulnerabilities, and generate actionable findings
• Implement advanced context management such as RAG and persistent agent memory
• Apply evaluation frameworks to measure accuracy, completeness, reliability, and security effectiveness of AI-generated assessments and outputs
• Integrate AI-driven assurance into engineering workflows and existing security infrastructure
• Continuously evaluate emerging AI models, agent frameworks, and engineering techniques to improve assurance capabilities
• Partner with security and engineering teams to translate security requirements and expert judgment into reusable automated assurance capabilities

Requirements

• 10+ years of hands-on security assurance experience with security architecture, threat modeling, security design reviews, and security risk assessment
• Experience evaluating AI system performance: reliability, correctness, failure modes, and effectiveness against objectives
• Proficiency in Python (or comparable) plus API integration and production software development
• Experience with LLM orchestration, agent tool use, retrieval systems, context engineering, and grounding outputs in trusted organizational data
• Experience incorporating security into spec-driven development, requirements engineering, secure design practices, or comparable structured methodologies

Benefits

• Hands-on engineering role at the intersection of security assurance and applied AI
• Opportunity to shape security integration into spec-driven development and influence how agentic systems are designed and built
• Expand security coverage by automating and augmenting assurance without proportionally increasing manual review effort