AI Application Security Analyst - AppSec & ML Security)

PURE Insurance

11d • $45,000 - $100,000 • Onsite

About The Position

We are seeking an AI Application Security Analyst to secure modern applications, including those leveraging machine learning and AI technologies. This role focuses on identifying, assessing, and mitigating vulnerabilities across the application lifecycle, with particular emphasis on AI-enabled applications and services. You will work closely with engineering teams to embed security into development pipelines, implement testing and runtime protections, and ensure that AI/ML components are resilient against emerging threats.

Requirements

• 3–6+ years of experience in Application Security or Product Security
• Hands-on experience with SAST, DAST, IAST tools
• Strong knowledge of OWASP Top 10 vulnerabilities
• Experience securing APIs and microservices
• Experience with modern authentication and authorization protocols (OAuth 2.0, OpenID Connect, SAML)
• Familiarity with CI/CD pipelines
• Basic understanding of AI/ML systems
• Security certification or willingness to obtain within 6 months

Nice To Haves

• Experience with ML frameworks is a plus
• Familiarity with AI threat models
• Experience with WAF, RASP, or API security solutions
• Experience with cloud platforms (AWS, Azure, GCP)
• Scripting skills (Python, Bash)

Responsibilities

• Perform application security assessments using SAST, DAST, and interactive testing tools
• Identify, triage, and prioritize vulnerabilities across web, API, and microservices architectures
• Integrate security testing into CI/CD pipelines (DevSecOps)
• Assess security risks in AI/ML-enabled applications, including model exposure and inference endpoints
• Identify vulnerabilities such as adversarial inputs, model abuse, and data poisoning
• Secure AI APIs, plugins, and third-party integrations
• Implement and tune WAF, RASP, and API security controls
• Conduct threat modeling and secure design reviews for applications and AI use cases
• Assess and harden identity and access flows ensuring least privilege
• Partner with developers to remediate vulnerabilities and improve secure coding practices
• Monitor and respond to application-layer security incidents
• Participate in on-call rotation
• Provide after-hours and weekend support
• Respond to security alerts and incidents
• Collaborate with teams during incident response

Benefits

• Opportunities to stretch and grow: your professional and personal development matters to us. We’re committed to providing experiences through on-the-job learning and professional development that increase your impact and rewards.
• Clarity and kindness: you can rely on us to be open, honest and supportive, offering clarity on what success looks like.
• Support in good times and bad: we believe in showing up for each other consistently, not only when it’s easy. You can expect a thoughtful partner, even when we disagree.
• A community that cares: we are committed to sustaining a community in which each person feels cared for as an individual. We lift each other up, celebrate wins together and support one another through challenges in work and life.

What This Job Offers

• Job Type: Full-time
• Career Level: Mid Level
• Education Level: No Education Listed