Agentic AI Engineer - Application Security

OPSWAT, a global leader in IT, OT, and ICS critical infrastructure cybersecurity, delivers an end-to-end platform that gives public and private sector organizations and enterprises the critical advantage needed to protect their complex networks, secure their devices, and ensure compliance. Over the last 20 years our commitment to innovative technology has earned the trust of more than 1,700 organizations, governments, and institutions globally, solidifying our role in protecting the world's critical infrastructure and securing our way of life.

The Position

We are seeking an Application Security Engineer with strong Agentic AI development capabilities to embed and operationalize security across the enterprise software development lifecycle.

This role combines hands-on application security reviews and security control validation with the engineering of security automation, AI-enabled security tooling, and agentic AI workflows, as well as the design and development of internal security tools based on requirements from leadership and cross-functional teams.

The engineer will partner closely with Product, Platform teams to ensure that enterprise in-house applications, APIs, AI services, autonomous agents, and MCP-based integrations are designed, built, tested, and operated with effective security controls.

The role is a builder-defender hybrid: review systems, validate security controls, automate repeatable checks, and design and develop internal security tools.

What you will be do:

• Perform security reviews for enterprise in-house applications across architecture, design, code, APIs, cloud services, data flows, and deployment patterns.
• Embed security into the enterprise Secure SDLC for in-house applications from design and development through build, test, deployment, and runtime operation.
• Develop agentic AI workflows and tools that automate repeatable AppSec activities such as application intake, evidence collection, control checks, threat-model preparation, finding enrichment, risk summarization, remediation guidance, and ticket/workflow creation.
• Build secure integrations between AI agents and engineering/security platforms through APIs, webhooks, CI/CD interfaces, and approved tool connectors.
• Perform other duties as assigned by the direct supervisor.

What we need from you:

• Bachelor's degree in Computer Science, Information Technology, Cybersecurity, Software or related field.
• 3+ years of experience in application security or software engineering with meaningful security responsibilities.
• Strong hands-on software development skills (for example, Python, JavaScript/TypeScript, Go, or similar)
• Experience working with DevOps workflows, source control, pull requests, build pipelines, artifact repositories, and developer issue-tracking processes.
• Familiarity with application and AI security guidance such as OWASP Top 10 / API Security Top 10, OWASP ASVS, OWASP AI/LLM guidance, MITRE ATLAS, and secure development practices.

OPSWAT is an equal opportunity employer. We celebrate diversity and are committed to providing an environment where equal employment opportunities are extended to all employees and applicants, free of discrimination and harassment of any type. All employment decisions are based on individual qualifications, job requirements, and business needs without regard to race, color, religion, age, sex, national origin, disability status, genetics, protected veteran status, sexual orientation, gender identity or expression, or any other category protected by federal, state, or local laws.

Recruiting Agencies: we do not accept unsolicited resumes from third party agencies for any of our open positions. To submit resumes for our jobs, there must be a recruiting contract approved by our legal team and endorsed by both parties. We are currently not accepting additional 3rd party agencies at this time.