Senior Application Security Specialist

Application Security Specialist | AI & Agent Security

Help shape how an organization builds secure software and adopts AI responsibly.

AI applications and autonomous agents are changing how software is developed and used. Securing them requires strong Application Security foundations and a practical understanding of the risks these technologies introduce.

We’re looking for an Application Security Specialist with AI and Agent Security expertise to strengthen security across applications, AI platforms, and software supply chains. You’ll combine hands-on security work with architecture guidance, helping engineering teams turn security requirements into effective controls.

What you’ll do

You’ll work closely with Engineering, Architecture, Cloud, DevSecOps, and Product teams to embed security throughout development and delivery.

Your responsibilities will include:

• Design and implement Application Security controls, standards, and secure-by-design practices.
• Assess GenAI applications, AI agents, and RAG architectures, establishing security guardrails and review processes.
• Conduct threat modelling, security assessments, and architecture reviews for application, cloud, and AI initiatives.
• Improve vulnerability management through AI-assisted analysis, risk-based prioritization, and remediation support.
• Strengthen software and AI supply chain security through SBOM/AI-BOM requirements, dependency controls, and third-party AI governance.
• Support developers and Security Champions with practical guidance, training, and security awareness activities.

Success means measurable improvements in security maturity, adoption of secure development practices, and reduction of application and AI risks.

What you bring

• 6+ years of experience in Application Security, Security Engineering, or DevSecOps.
• Hands-on experience with SAST, DAST, SCA, API security, container security, threat modelling, and vulnerability management.
• A strong understanding of secure software development, CI/CD security, and cloud-native platforms.
• Practical experience securing AI-enabled applications, GenAI solutions, AI agents, RAG architectures, or comparable technologies.
• The ability to influence engineering teams, explain security risks clearly, and provide advice that teams can put into practice.

Experience in financial services or another regulated industry is valuable, as is familiarity with NIST AI RMF, OWASP, OWASP SAMM, and NIST SSDF. A relevant degree and certifications such as CISSP, SecAI+, or equivalent are preferred.

Why this role?

You’ll work across established Application Security disciplines and the emerging challenges of AI security. Your contribution will extend from assessing individual solutions to defining controls and practices that teams can use across the organization.

The role offers international collaboration with stakeholders across Europe, APAC, and the US, and a combination of technical delivery, architecture advisory, and developer enablement.

Working model: Hybrid, with three days per week in the office.

Interested? Get in touch to discuss the assignment and how your experience could fit.