Nature of Work
The Senior Application Security Specialist is responsible for identifying and reducing security risks across Maya's applications and AI-enabled solutions. This role works closely with engineering teams to perform secure code reviews, assess application and AI security risks, triage vulnerabilities, and promote secure software development practices throughout the SSDLC and AI SDLC.
Responsibilities
- Perform manual secure code reviews to identify security vulnerabilities.
- Conduct application security assessments, threat modeling, and security design reviews.
- Assess AI-enabled applications for common AI security risks, including prompt injection, insecure LLM integrations, excessive permissions, and sensitive data exposure.
- Validate, triage, and prioritize vulnerabilities from manual reviews and security tools.
- Provide secure coding and AI security guidance to developers.
- Review authentication, authorization, encryption, API security, and AI integrations.
- Support SSDLC and AI SDLC activities, security governance, and risk assessments.
- Develop secure coding standards, AI security guardrails, and security best practices.
- Mentor junior team members and collaborate with engineering teams to improve application and AI security.
Displayed Skill Mastery
- 5+ years of experience in Application Security or Secure Software Development.
- Strong experience performing manual secure code reviews.
- Deep understanding of OWASP Top 10, OWASP API Security Top 10, and secure coding principles.
- Familiarity with AI security concepts, including the OWASP Top 10 for LLM Applications, prompt injection, secure AI integrations, and AI-related risks.
- Experience with threat modeling (e.g., STRIDE) and security design reviews.
- Experience triaging vulnerabilities from SAST, DAST, SCA, penetration testing, and AI-assisted code review tools.
- Strong understanding of authentication, authorization, session management, cryptography, and API security.
- Strong communication, stakeholder management, and mentoring skills.
