AI-Application Security Engineer

About This Role

Responsibilities

• In partnership with the AI-Application Security Architect, contribute to detailed technical design and operationalize security architecture, standards, and approved security patterns across application and AI-enabled systems.
• Partner directly with engineering teams to embed security controls and secure-by-design practices into the software development lifecycle and AI lifecycle.
• Evaluate, test, and perform technical validation of AI and application security tools, including AI red teaming, AI and MCP gateways, DAST, SAST, SCA, API security, and mobile application security capabilities.
• Implement, integrate, tune, and scale security tooling across application and AI environments, including runtime monitoring, governance controls, testing platforms, and posture management capabilities, with a focus on coverage, signal quality, and operational effectiveness.
• Leverage AI and automation to scale security operations, vulnerability management, and developer enablement through technologies such as Python, AWS services, and CI/CD pipelines.
• Triage, validate, and prioritize vulnerabilities identified through application and AI security tools, assess risk in business and technical context, and partner with engineering teams to drive timely remediation.
• Provide hands-on guidance to developers, including low-code and no-code users, on secure development practices, platform-specific risks, secure integration patterns, and remediation approaches.
• Support the security review and risk assessment of AI platforms, models, agents, skills, MCPs, and third-party integrations by applying defined controls, documenting risk decisions, and helping establish scalable onboarding and governance practices.
• Develop, maintain, and improve secure coding standards, implementation guidance, guardrails, and technical documentation for both application and AI use cases.
• Stay current on emerging cybersecurity threats, particularly in AI security, and incorporate relevant mitigations into security tooling, engineering practices, and control design.
• Contribute to a strong security engineering culture by mentoring junior engineers, sharing technical knowledge, and helping mature application and AI security practices across the organization.

Requirements

• Understanding of application and AI security principles, methods, and technologies, including AI-specific risks such as prompt injection, model abuse, insecure agentic integrations, and data leakage.
• Strong analytical and problem-solving skills with the ability to identify and mitigate security risks across both traditional application and AI-enabled systems.
• Strong verbal and written communication and collaborative skills.
• Ability to effectively communicate technical topics to technical and non-technical audiences.
• Ability to prioritize workload and consistently meet deadlines.
• Security architecture, threat modeling, secure design.
• Bachelor's degree in Computer Science, Information Systems, Cybersecurity, Computer Engineering, Software Engineering, or a related combination of education and experience.
• Minimum 2+ years of information security or software development experience.
• Preferred: CISSP, CSSLP, GIAC or similar certifications.
• Preferred: C#, Angular, Python programming experience.
• Preferred: Experience in cloud platforms, AWS, Github.
• Experience with application security tooling; SAST, DAST, SCA, API, Mobile, Red Team.
• Experience with AI tools (AI Coding assistants, Skills, MCPs, Agents).

Benefits & Perks

About Stifel Financial Corp.

Stifel Financial Corp. is a leading independent investment bank and financial services company based in St. Louis, Missouri. Founded in 1890, it has grown into a full-service firm, ranking as the 7th largest in the U.S. by the number of advisors. Stifel went public in 1983 and is listed on the New York Stock Exchange under the ticker symbol "SF." The company offers a variety of services, including wealth management, investment banking, equity research, and sales and trading. Stifel provides personalized investment advisory and financial planning through a large network of financial advisors. Its investment banking division specializes in debt and equity offerings, private placements, and strategic advisory services. Stifel also operates one of the largest equity research platforms in the U.S., covering over 1,100 companies, and engages in market making for more than 3,000 domestic equities. The firm serves a diverse clientele, including individual investors, institutional clients, businesses, and municipalities, providing tailored financial solutions to meet their needs.