Job Description

Job Description

Security Engineer

Location: Seattle, WA – Preferred / Sunnyvale, CA – Local Candidates Preferred

Client: Indium Technologies

Employment Type: W2 Only no c2c

Role Overview

We are looking for experienced Security Engineers to support Engineering Security initiatives focused on security and privacy reviews, threat modeling, and third-party AI Agent security testing .

The selected candidate will work closely with Engineering, Security, Privacy, and third-party teams to identify security risks, perform hands-on assessments, and provide actionable remediation guidance.

Key Responsibilities

\n
• Conduct security and privacy design reviews of services, applications, APIs, engineering proposals, and AI integrations.
\n
• Evaluate architecture, data flows, access controls, trust boundaries, and security safeguards.
\n
• Perform threat modeling for critical services and AI agents, identifying attack surfaces, threat scenarios, attack paths, mitigations, and residual risks.
\n
• Conduct hands-on security testing of third-party AI agents, including:
\n
• Prompt injection
\n
• Tool misuse
\n
• Data access and permissions
\n
• Excessive agency
\n
• External integrations
\n
• Sensitive-data exposure
\n
• Document security findings, risk assessments, supporting evidence, and practical remediation recommendations.
\n
• Partner with Engineering and Security teams through remediation and validation.
\n
• Develop repeatable security assessment processes, including review checklists, threat models, test cases, reporting templates, and automation workflows.
\n

Minimum Qualifications

\n
• 3+ years of professional experience in Security Engineering, Application Security, Product Security, Offensive Security, Systems Architecture , or a related technical security field.
\n
• Experience reviewing complex technical designs and identifying security risks across applications, APIs, cloud services, microservices, or distributed systems.
\n
• Strong knowledge of:
\n
• Threat Modeling
\n
• Vulnerability Classification
\n
• Risk Modeling
\n
• Authentication & Authorization
\n
• Least Privilege
\n
• Data Protection
\n
• Hands-on experience with security testing, vulnerability investigation, penetration testing, adversarial testing, or security-control validation.
\n
• Strong communication skills with the ability to explain technical security findings to Engineering, Security, Privacy, and third-party stakeholders.
\n

Preferred / Good to Have

\n
• Experience assessing AI/LLM agents and AI security risks.
\n
• Hands-on knowledge of prompt injection, unsafe tool use, excessive agency, and AI security testing .
\n
• Experience with privacy and security design reviews.
\n
• Cloud security experience across AWS, Azure, or GCP.
\n
• Experience with security automation using Python, Go, Bash , or similar languages.
\n
• Hands-on penetration testing and vulnerability assessment across applications, APIs, cloud infrastructure, and networks.
\n
• Experience identifying and validating real-world attack paths and providing actionable remediation guidance.
\n

Note: Candidates must be able to work on W2 .

Local candidates in Seattle, WA or Sunnyvale, CA are strongly preferred.

Job Tags

Similar Jobs