App Sec with AI Architect

Title: App Sec with AI

Location: Princeton NJ – onsite only

Duration: Full Time / Contract

Job Summar

yCore: Application Security and Vulnerability Managemen

tRole: Senior Security Consultant (Application Security & AI Governance). Advising enterprise clients on modern AppSec, AI/LLM risk mitigation, and risk-based vulnerability management

.Core Responsibilitie

s
AppSec Assessments: Evaluate client software practices using BSIMM or OWASP SAMM to build maturity roadmap

s.Threat Modeling: Conduct architectural risk assessments and threat modeling workshops for client engineering team

s.DevSecOps Pipelines: Guide clients on embedding automated security tools (SAST, DAST, SCA) into CI/CD workflow

s.AI Threat Profiling: Assess risks unique to GenAI, LLMs, and agentic integrations using frameworks like the OWASP Top 10 for LLM

s.AI Defenses: Design architectural guardrails to prevent prompt injection, data poisoning, and unauthorized data leakag

e.AI Governance: Author enterprise policies, risk frameworks, and data privacy controls for corporate AI us

e.Program Modernization: Redesign client vulnerability management workflows to shift them from reactive scanning to proactive orchestratio

n.Risk Prioritization: Establish triage systems utilizing CVSS and EPSS metrics so clients fix high-risk flaws firs

t.Tool Selection: Act as an independent advisor to help clients select and optimize AppSec Posture Management (ASPM) tool

s.Client Deliverables: Produce executive-ready risk reports, technical blueprints, and developer remediation playbooks. [1, 2,

3]Required Technical Skil

lsAppSec Tooling: Hands-on experience with enterprise suites like Snyk, Checkmarx, GHAS, Wiz, or Veracod

e.AI Ecosystems: Understanding of vector database security, AI orchestration frameworks (LangChain), and API securit

y.Cloud Architecture: Security proficiency across major cloud-native infrastructures (AWS, Azure, or GCP

).Standards & Frameworks: Deep knowledge of OWASP Top 10, ASVS, NIST SSDF, and ISO 2703

4.Experience & Qualificatio

nsExperience: cybersecurity consulting, application security engineering. Vulnerability Management, AI Securi

tyEducation: Bachelor’s degree in Cybersecurity, Computer Science, or equivalent practical experienc

e.Certifications: CISSP, CSSLP, CCSP, CISA, or specialized AI security credentials preferre

d.Consulting Skills: Strong presentation skills to communicate technical risks to both developers and C-level executive