Application Security Engineer, Generative AI
Liftoff · United States (Remote)
About this role
**Liftoff — Application Security Engineer, Generative AI** **About Liftoff** Liftoff is a leading AI-powered performance marketing platform for the mobile app economy. Our end-to-end technology stack helps app marketers acquire and retain high-value users, while enabling publishers to maximize revenue across programmatic and direct demand. Liftoff’s solutions—including Accelerate, Direct, Monetize, Intelligence, and Vungle Exchange—support 6,600+ mobile businesses across 74 countries in sectors such as gaming, social, finance, ecommerce, and entertainment. Founded in 2012 and headquartered in Redwood City, CA, Liftoff has a diverse, global presence. --- **About the Security Team** The Liftoff Security team protects Liftoff’s customers, users, and employees. We architect Liftoff’s security posture, build the tools and systems that defend it, and partner with engineering teams as they ship new products and features. This is an individual contributor role reporting to the Director of Security. You’ll own application security for GenAI, Creative GenAI, and emerging businesses. Application security is the primary focus, with opportunities to contribute across cloud and infrastructure security, support Accelerate and MX as priorities change, and participate in the team’s on-call and incident-response work. --- **Responsibilities** - Establish secure software development standards and integrate security into engineering design and development. - Create self-service paths for engineering teams to build and deploy securely via documented review workflows, reusable tools, and secure design patterns. - Perform design/code reviews, threat modeling, and security assessments for GenAI, Creative GenAI, and emerging businesses (including sandbox design and isolation). - Partner with stakeholders across the organization to build a security-minded engineering culture. - Triage security issues, prioritize vulnerabilities by risk, and drive timely remediation and verification with engineering teams. - Assess vendors and AI tools to ensure their security controls support secure employee use. - Participate in the security team’s on-call and incident-response rotation (occasional off-hours response). - Run blameless post-incident reviews, document findings, and ensure remediation follow-through. - Build maintainable security tools and automation, including an AI-assisted code-security triage pilot that produces actionable findings at an acceptable false-positive rate. - Partner with Detection & Response to turn application-security findings and threat models into detection improvements and response guidance. - Contribute across application, cloud, and infrastructure security as priorities evolve (including Accelerate and MX). --- **Minimum Qualifications** - 5+ years of relevant experience in security engineering or software engineering. - Strong judgment using a risk-based approach to prioritize security work. - Experience partnering cross-functionally to deliver security improvements and help engineers choose practical fixes. - Ability to write production-quality code for security tools/automation, review PRs, and navigate large codebases. - Strong understanding of secure software design, application/API security, authentication/authorization, threat modeling, and code review. - Experience assessing cloud and infrastructure security and contributing beyond a primary application-security specialty. - Ability to quickly understand complex engineering
Listing freshness
CronJobs last confirmed this listing 2h ago. If its source stops confirming the opening for seven days, this page is removed from active inventory.