Lead Application Security Engineer - AI

The Job in short

Backbase has ushered in a new era of digital banking with the global launch of its AI-powered Banking Platform, recently lighting up Times Square. This milestone marks a bold step in reshaping the digital banking landscape—empowering banks to move beyond generative AI experiments and into full-scale execution. By automating critical operations and amplifying productivity across both front and back offices, Backbase is focused on transforming the promise of AI into measurable business impact.

To drive this vision forward, the Ecosystems department in Backbase is building the Banking Grade Agentic AI Platform—a next-generation platform that leverages advanced agent-based architectures to automate and optimize complex banking workflows. We operate with a bold startup mindset prioritizing speed, autonomy, and breakthrough innovation.

We are looking for a skilled and curious AI Application Security Engineer to help safeguard the next generation of intelligent systems. In this role, you’ll take ownership of securing AI applications end-to-end — from system design and data pipelines to deployment and continuous monitoring. You’ll conduct security risk assessments, lead security architecture reviews, and perform threat modeling to identify risks in AI-driven platforms.

Meet the job

• Guide developers in building and deploying secure agentic applications.
• Embed application security requirements into the software development lifecycle, ensuring both classic AppSec and AI / LLM-specific controls are covered.
• Establish standards and processes to run evaluations for agentic apps and red teaming automated using CI tooling.
• Conduct architecture risk analysis, threat modeling, and code reviews across microservices, APIs, and AI pipelines.
• Identify and triage vulnerabilities in web, mobile, and AI applications (including LLM and generative AI systems).
• Support the rollout and integration of SAST, SCA, IAST, RASP, and AI-specific security tooling.
• Partner with DevOps / ML Ops to ensure secure CI / CD pipelines, container security, and runtime protections.
• Research evolving security threats — from OWASP Top 10 to AI-specific adversarial attacks — and drive proactive improvements.

How about you