AI Application Security Analyst – AppSec, ML Security

The Muse

AI Application Security Analyst focusing on securing AI-enabled applications and collaborating with engineering teams on vulnerabilities. Identifying risks and embedding security into development pipelines.

Posted 5/28/2026full-timeCalifornia • 🇺🇸 United StatesMid-LevelSenior💰 $45,000 - $100,000 per yearWebsite

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

SASTDASTIASTDevSecOpsOWASP Top 10API securitymicroservicesOAuth 2.0OpenID ConnectSAML

Soft Skills

vulnerability triagesecure coding practicescollaboration with developersthreat modelingsecure design reviews

Tools & Technologies

CI/CD pipelinesWAFRASPAI APIsthird-party integrations

Certifications & Qualifications

security certification

Industry Keywords

application securityproduct securityidentity and access managementleast privilegeAI/ML systems

Tech Stack

Tools & technologies

Microservices

About the role

Key responsibilities & impact

Perform application security assessments using SAST, DAST, and interactive testing tools
Identify, triage, and prioritize vulnerabilities across web, API, and microservices architectures
Integrate security testing into CI/CD pipelines (DevSecOps)
Assess security risks in AI/ML-enabled applications, including model exposure and inference endpoints
Identify vulnerabilities such as adversarial inputs, model abuse, and data poisoning
Secure AI APIs, plugins, and third-party integrations
Implement and tune WAF, RASP, and API security controls
Conduct threat modeling and secure design reviews for applications and AI use cases
Assess and harden identity and access flows ensuring least privilege
Partner with developers to remediate vulnerabilities and improve secure coding practices
Monitor and respond to application-layer security incidents

Requirements

What you’ll need

3–6+ years of experience in Application Security or Product Security
Hands-on experience with SAST, DAST, IAST tools
Strong knowledge of OWASP Top 10 vulnerabilities
Experience securing APIs and microservices
Experience with modern authentication and authorization protocols (OAuth 2.0, OpenID Connect, SAML)
Familiarity with CI/CD pipelines
Basic understanding of AI/ML systems
Security certification or willingness to obtain within 6 months

Benefits

Comp & perks

Exceptional service, hospitality and care
Professional development opportunities
Opportunities to stretch and grow
Support in good times and bad
A community that cares