Information Security Engineer – Enterprise & Automation Focus

Career Developers•New York, NY

2d•Hybrid

About The Position

Career Developers Inc. is recruiting an Information Security Engineer for a growing, technology-focused client. The organization combines advanced computing, software development, data-intensive research, and machine learning to address complex real-world problems. Its security team operates as an engineering function, emphasizing technical investigation, building solutions, automation, and close partnership with technical teams rather than a traditional compliance-focused approach. The role focuses on improving security across software, computing infrastructure, endpoints, and emerging AI applications. The engineer will build security tools and automated workflows, investigate security events, identify and remediate vulnerabilities, and help engineering teams design and operate systems securely. A developing area of work is evaluating how AI-powered software, autonomous applications, and intelligent workflows affect security, including systems that interact with language models, automated decision-making, or machine-learning services. The environment is suited to engineers who enjoy technical depth, experimentation, programming, and solving security problems from first principles, including problems without established playbooks. Candidates with different seniority levels may be considered based on technical depth and accomplishments. The position is hybrid in New York City, with onsite work Tuesday through Thursday and remote work Monday and Friday. Salary is open.

Requirements

Professional experience in cybersecurity, security engineering, application security, infrastructure security, detection engineering, incident response, or a closely related discipline.
Strong programming or scripting skills, ideally with Python or another language commonly used for automation.
Demonstrated ability to build security tooling or automate repetitive security activities.
Experience investigating technical security issues across systems, applications, endpoints, or networks.
Practical knowledge of vulnerability identification and remediation.
Understanding of attacker behavior, common exploitation techniques, and methods used to reduce exposure.
Familiarity with endpoint security, security monitoring, logging, or detection technologies.
Experience working with software engineers, infrastructure teams, or technical platform groups.
Understanding of secure development practices and how security controls fit into modern engineering workflows.
Ability to evaluate unfamiliar technologies and identify potential security implications.
Strong analytical skills and ability to explain technical security issues clearly.
Ability to work successfully with technical teams in a collaborative hybrid environment.
Must come from a small- to mid-sized technology company or startup-type setting where the candidate controlled security technically.
Senior-level security engineering experience.

Nice To Haves

Exposure to AI applications, language models, autonomous systems, machine-learning platforms, or AI security.
Experience with offensive security, adversarial testing, security research, or penetration testing.

Responsibilities

Build technical security solutions that improve protection across software, computing infrastructure, endpoints, and emerging AI applications.
Create automated security workflows that reduce manual investigation and remediation work.
Develop internal tools and scripts to identify suspicious activity, security weaknesses, configuration issues, and operational risk.
Partner with software and infrastructure engineers to incorporate security earlier in application and system design.
Review technical environments for weaknesses and recommend practical controls based on risk and business impact.
Investigate security events and determine appropriate containment, remediation, and prevention strategies.
Improve the organization’s ability to identify abnormal behavior across endpoints, applications, and computing environments.
Conduct technical security reviews of new systems, services, tools, and internally developed technologies.
Evaluate how autonomous software and AI-enabled applications could introduce new attack paths or security concerns.
Help establish secure patterns for applications that interact with language models, automated decision-making systems, or machine-learning services.
Perform targeted testing to identify exploitable weaknesses before they become production issues.
Develop repeatable processes for vulnerability discovery, prioritization, ownership, and remediation.
Work closely with technical engineering teams on security problems that may not have established playbooks.
Research security techniques, attack methods, and defensive technologies that could improve the organization’s security posture.
Contribute to technical standards and engineering guidance without creating unnecessary process or friction.