DNV
Principal Application & AI Security Engineer
“"Security is embedded into the earliest stages of Synergi Life's development process"– DNV Blog (2026-05-21), Developer...”
Application security and adjacent roles only. Each listing links to the original posting.
38 open roles. Updated October 16, 2026.
38 roles
DNV
“"Security is embedded into the earliest stages of Synergi Life's development process"– DNV Blog (2026-05-21), Developer...”
DNV
“"Security is embedded into the earliest stages of Synergi Life's development process"– DNV Blog (2026-05-21), Developer...”
Citi
“Citi emphasizes "shifting left"and automated testing in the software lifecycle.”
TAG - The Aspen Group
“The AppSec philosophy involves "helping the entire team understand the "why" and the "how" of security.”
Kyndryl
“Kyndryl's Application Security philosophy is centered on a "security-by-design and zero-trust approach" (Self-Reported).”
Autodesk
“A 'shift-left' approach, aiming to embed security directly into the software development lifecycle (SDLC).”
Credit Acceptance
“"Secure by design, compliant by default"”
Fiserv
“Fiserv's Application Security philosophy centers on proactive protection and developer enablement by embedding security...”
GEICO
“'Protect security, privacy and integrity of customer and associate data & systems'.”
PayPal
“* **Stated AppSec Mission:** PayPal emphasizes creating strong, secure payment systems and integrating security into...”
SMBC Group
“SMBC Group views cybersecurity risks as a top management concern.”
Rappi
“Leading a maturity program and executing a Secure Software Development Lifecycle (SSDLC) roadmap.”
Westpac
“Westpac's stated AppSec mission is "Cyber security specialists make everyone safer.”
Cadence
“Applying continuous security assessments during development operations and implementing a 'shift-left' security...”
FICO
“FICO's AppSec philosophy is guided by a "security by design"principle and a proactive, risk-based approach.”
IBM
“Embedding security into the SDLC, enabling "shift-left"and transforming DevOps into DevSecOps, and an Application...”
KLA
“KLA bases its security processes on the NIST Cybersecurity Framework and prioritizes the remediation of identified...”
Amgen
Plaid
“Improving customer trust through the secure development and delivery of products.”
Qualys
“Embedding security early and continuously in the development lifecycle, fostering DevSecOps collaboration, and...”
Siemens
“Security becomes a default part of products, processes and organizations.”
Unisys
“Unisys follows a 'Secure by Design' philosophy aimed at protecting digital assets across cloud, applications, and data.”
U.S. Bank
EXL
“EXL's stated AppSec mission includes a general call to 'For more information, please reach out to:'.”
Databricks
“Prioritize security from a risk management perspective, use a defense-in-depth approach, and left-shift security in the...”
Dexcom
“Dexcom's stated mission is 'Your data is our responsibility,' supported by ISO/IEC 27001:2022 certification.”
TD Bank
KLA
“KLA bases its security processes on the NIST Cybersecurity Framework and prioritizes the remediation of identified...”
Eli Lilly and Company
“The team emphasizes building security by design with early involvement of security teams in innovation conversations,...”
Elevance Health
“Security by design approach guided by NIST Cybersecurity Framework and HITRUST CSF.”
SMBC Group
“SMBC Group views cybersecurity risks as a top management concern.”
Vertex Inc.
RBC
“Safeguarding hybrid-cloud environments and views cybersecurity as more than just an IT concern.”
Ares Management
“Strategy and visibility, with Zero Trust framed as a foundational strategy.”
GEICO
“'Protect security, privacy and integrity of customer and associate data & systems'.”
State Street
“Integrating cybersecurity into agile practices and DevSecOps strategies.”
Trimble Inc.
“"Trimble Secure Development Life Cycle (TSDLC)"”
Candescent
“Candescent's security mission emphasizes fraud mitigation as a platform capability.”
AI security engineers protect systems that use machine learning models, especially products built on large language models. The work includes threat modeling AI features, testing for prompt injection and data leakage, reviewing how models reach internal tools and data, and building guardrails and monitoring around them.
It is a young specialty, and expectations differ from one employer to the next. Some titles pair AI security with application security; AI red team roles mostly appear on the offensive security page. Hands-on experience with LLM application frameworks comes up often, as do the OWASP Top 10 for LLM Applications and the NIST AI Risk Management Framework. The count below shows how many roles were added in the last 30 days.