Jobs in the United States

25+ jobs

Save this search

Added 2 mins ago
H&
Principal Machine Learning Engineer
Hims & Hers
Remote, United States
- $180,000 to $200,000 USD / year
How can we use vast amounts of proprietary and internet-scale healthcare data to build systems that enable access to significantly better health care? In this role as Principal Machine…
Added 4 mins ago
Staff Tech Lead Software Engineer, Vehicle Realism Platform
Waymo
Mountain View, CA · San Francisco, CA
…pedestrians, cyclists, motorcyclists), roads, traffic control systems, and weather conditions, and the full sensor suite including camera, Lidar and radars. Waymo's simulation allows the…
Added 11 mins ago
Sr Project Engineer
Carlisle
Garland, Texas, TX
The Senior Mechanical Engineer is responsible for leading the design, execution, and implementation of capital equipment and facility projects across Carlisle operating sites. This role…
Added 11 mins ago
VV
Lead Electrical Engineering Hardware Design Engineer
Veracity Ventures Inc.
Cincinnati, OH
- $140,000 to $165,000 USD / year
We are seeking an experienced Lead Electrical Engineer – Hardware Design to lead the design, development, testing, and qualification of ruggedized analog and digital electronic systems for…
Added 11 mins ago
Sr Project Engineer
Carlisle
Dallas, Texas, TX
The Senior Mechanical Engineer is responsible for leading the design, execution, and implementation of capital equipment and facility projects across Carlisle operating sites. This role…
Added 12 mins ago
Project Leader 1 (Telecommunications)
M.C. Dean, Inc
Atlanta, GA
M.C. Dean is Building Intelligence®. We design, build, operate, and maintain cyber-physical solutions for the nation’s most recognizable mission critical facilities, secure environments,…
Added 14 mins ago
AN
Senior Project Manager - Remote
AtkinsRealis Nuclear Secured LLC
United States
- $119,000 to $199,000 USD / year
…technology to transform the world's infrastructure and energy systems. Together, with our industry partners and clients, and our global team of consultants, designers, engineers and project…
Added 16 mins ago
Field Engineer - Controls & Automation (F&G Designer) - Prudhoe Bay, AK
Worley
Prudhoe Bay, AK · Prudhoe Bay
Design fire detection equipment, alarm systems, and fire extinguishing devices and systems.
Added 18 mins ago
O
Process Consultant
OpenTent
Denver, CO
- $90,000 to $115,000 USD / year
Design the future-state process with the client and create the artifacts that make it stick: staff communication plans, training materials, process documentation
Added 20 mins ago
Staff SRE, Site Experience
Reddit
Remote, United States
We are looking for a Staff Site Reliability Engineer to lead reliability engineering initiatives for critical user facing systems at internet scale. In this role, you will partner closely…
Added 32 mins ago
C
Full Stack Engineer, Business Applications & AI
Chowbus
Chicago, IL
- $100,000 to $130,000 USD / year
…months. You’ll be an early member of the team, reporting to the Staff Engineer who leads the platform. You’ll work directly with business stakeholders, own features end to end, and help…
Added 36 mins ago
Manager -IPQA /QA Validation
Glenmark Pharmaceuticals Inc., USA
Monroe, NC
…budgets while building best in class quality processes and systems at the…
Added 36 mins ago
Sr Engineer I- Instrumentation
Amgen
Holly Springs, NC
…group to partner closely with the corporate engineering team to design, build, commission, and qualify new equipment and systems needed for drug substance production. Additionally, you will…
Added 38 mins ago
Staff Application Security Engineer
BambooHR
Remote, United States
…agents that connect through open protocols. We're hiring a Staff Application Security Engineer to help lead application security through that shift and beyond. You'll set the review bar and…
Added 45 mins ago
CO
Systems Administrator
City of Brighton
Brighton, CO
- $38.23 to $52.38 USD / hour
Install, configure, and maintain server hardware, operating systems, and virtualization platforms to support city applications and services.
Added 48 mins ago
SC
Physical Substation Engineer
Stanley Consultants
Denver, CO
- $40,123 USD / year
We are seeking qualified candidates for a Mid Level Substation Physical Design Engineer with a strong background in high voltage substation design. Technical responsibilities will include…
Added 48 mins ago
SC
Protection & Controls Engineer
Stanley Consultants
Denver, CO
- $40,123 USD / year
We are seeking qualified candidates for a Mid-Level Protection and Control Engineer with a strong background in high voltage substation design. Technical responsibilities will include the…
Added 49 mins ago
Defensive Cybersecurity Engineer/Blue Team
The Mitre Corporation
Springfield, VA · McLean, VA
…AI-enabled cybersecurity. The successful candidate will help design, implement, and evaluate next-generation defensive capabilities that leverage machine learning, large language models,…
Added 49 mins ago
Lead SATCOM MS&A Engineer
The Mitre Corporation
Bedford, MA · Colorado Springs, CO · El Segundo, CA · McLean, VA
As an operator of Federally Funded Research and Development Centers (FFRDCs), MITRE staff are tasked with applying their skills to impact programmatic and technical decisions of highest…
Added 49 mins ago
Senior SATCOM Lab Engineer
The Mitre Corporation
Bedford, MA
…Our sponsors rely on a wide range of wireless communications systems, including commercial radios, cellular technologies, satellite communications, tactical data links, and other…
Added 49 mins ago
Staff Engineer, Engineering-wide
Plaud
San Francisco, CA · Palo Alto, CA
- Write production code: design, build, review and ship, not just advise.
Added 55 mins ago
D
Staff AI Product Engineer | REMOTE
Distru
Remote, United States
- $200,000 to $300,000 USD / year
Agentic harness: a multi-agent system that safely operates across a business's core tools (ERP, CRM, spreadsheets, calendars, email, analytics, compliance systems)
Added 1 hour ago
Data Center Chief Engineer - Night
Amazon Data Services, Inc.
Boardman, OR
AWS Infrastructure Services owns the design, planning, delivery, and operation of all AWS global infrastructure. In other words, we’re the people who keep the cloud running. We support all…
Added 1 hour ago
Staff SW Engineer - .NET AI Engineer
Visa Technology and Operations LLC
Austin, TX
Software Development Engineers are expert problem-solvers and builders who design, implement, and improve software applications and systems. In this role, engineers spend approximately…
Added 1 hour ago
Robotics Engineer
Nidus Technologies
New York City, NY
We are seeking a Staff Robotics Engineer to join our team and drive the development of advanced robotic systems that combine hardware and software to solve complex manufacturing and…

BambooHR

Staff Application Security Engineer

Remote, United States

Apply About employer

Applications open in a new tab.

Job details

Experience: 8+ years of experience in security, including 5+ years of hands-on experience in application security
Posting language: English
Posted: Nov 9, 2026

Original job description

Please Note: This is a remote position available in the state listed on this job. Additionally, employment with BambooHR is contingent on passing both a background and credit check.

AI at BambooHR

At BambooHR, we believe in leveraging cutting-edge technology to empower people and transform HR. We’re actively integrating AI into our solutions and workflows to enhance efficiency and drive innovation. To that end, we’re looking to our existing team members and future hires to share this forward-thinking mindset: individuals who are curious about AI’s potential, eager to learn and adapt, and ready to explore how intelligent tools can elevate their work along with BambooHR’s impact on setting people free to do great work. Join us in reimagining the future of HR!

Essential Job Duties

AI is becoming part of how BambooHR's platform works, from features we build to agents that connect through open protocols. We're hiring a Staff Application Security Engineer to help lead application security through that shift and beyond. You'll set the review bar and standards for agentic systems, and you'll architect the agents our security team uses to scale its work. It is a hands-on, organization-level role for someone who does well in ambiguity and gets results through knowledge, influence, and the help of their team.

You will:

Lead security reviews and threat models of AI features and agentic systems - including autonomous agents, MCP servers, and third-party integrations - and keep review playbooks and quality criteria current
Set BambooHR's security standards for AI agents, covering identity and delegated authorization, tenant- and user-scoped data access, safe handling of tool output, tool supply chain, and human-approval requirements, and track adoption as threats evolve
Own the design of agents the security team uses for finding validation, triage, review assistance, and remediation - building and shipping them with clear evaluation criteria, bounded permissions, and human approval gates for high-impact actions
Help developers and security champions build and use agents safely through self-serve guidance and tooling, and advocate for the partner-team investment that work requires
Work with engineering and product leadership to embed security requirements into the SDLC, including design-time and release-time gates for AI features, and make agent-assisted code review, finding validation, and fix suggestions a default part of every team's CI/CD pipeline with clear blocking criteria and a fast exception path
Run security programs that span multiple teams and quarters - setting goals, milestones, and success metrics; maintaining a lightweight intake, prioritization, and retrospective cadence; coordinating dependencies across engineering, product, and operations; and reporting progress, risks, and tradeoffs to leadership
Represent AppSec in architecture forums, harmonize security requirements to reduce duplicated effort across teams, act as a point of escalation, and coach leaders on security tradeoffs
Partner with Legal, Privacy, and GRC on AI governance to close gaps between policy intent and technical implementation through guardrails and automation, including for emerging AI regulations
Train and coach software engineers and engineering teams on secure design and threat modeling, with emphasis on authentication, authorization, multi-tenancy, and AI features
Mentor fellow security engineers on technical direction and career growth, and close skill gaps on the security team through onboarding, training, and mentorship
Participate in an on-call rotation as needed to support incident response and resolve escalated security issues

What You Need to Get the Job Done

Bachelor's degree in Computer Science, Information Security, or a related field, or equivalent practical experience
8+ years of experience in security, including 5+ years of hands-on experience in application security
Experience securing multi-tenant SaaS platforms, including tenant isolation
Cloud and infrastructure security experience (e.g., AWS, Azure, GCP)
Hands-on experience building AI agents or agentic workflows, with concrete examples of how you handled permissions, failures, and validation - production systems, internal tools, personal or open-source projects, and substantial prototypes all count
Demonstrated ability to evaluate the security of AI and agentic systems, including prompt injection, tool and context poisoning, excessive agency, delegated authorization, data leakage, and supply-chain risk in models and tools; familiarity with the OWASP Top 10 for LLM Applications, the OWASP Top 10 for Agentic Applications, or comparable frameworks
Ability to design evaluations for agentic workflows covering task success, false positives and negatives, adversarial cases, and regression checks
Proven experience leading threat modeling (e.g., STRIDE, attack trees) and design reviews for complex applications and APIs
Deep understanding of web application and API security, including authentication and authorization (OAuth 2.0 scopes and delegation, OpenID Connect, token audience and validation), session management, and access control models
Strong software engineering skills in at least one language (e.g., Python, TypeScript, PHP), including testing and maintaining tools other people depend on
A track record of influencing without authority: leading cross-team initiatives, building business cases, and explaining technical risk in business terms to engineering, product, legal, and leadership audiences
Experience mentoring engineers, formally or informally
Sound judgment in ambiguous situations, including the ability to explain a tradeoff, recommend a mitigation, and bring risk-acceptance decisions to the right owner

What Will Make Us REALLY Love You

Experience securing MCP servers and gateways
Experience securing AI coding assistants or developer agent tooling at organizational scale, or integrating AI-driven security checks into CI/CD pipelines
Familiarity with AI governance and SaaS compliance frameworks (e.g., NIST AI RMF, ISO/IEC 42001, EU AI Act, SOC 2, ISO 27001)
Relevant security certifications (e.g., CSSLP, OSWE, GWAPT)
Experience building or running security champions programs, such as recruiting and training champions or embedding security advocates in engineering teams

What You'll Love About Us

A Great Company Culture that has been recognized by multiple organizations like Inc, and Salt Lake Tribune
Comprehensive health, life, and disability insurance
Generous leave policies that include 4 weeks of vacation, 12 company holidays, parental leave, and volunteer time off so you can enjoy quality of life
401k plans with up to 6% company match
$2000 Paid-Paid Vacation bonus
EAP through Headspace
Check out all our benefits that benefit you

About Us

At BambooHR, we're building something different: we're building a people intelligence platform that transforms HR and sets people free to do great work! We're a proven market leader driving innovation while building lasting success through thoughtful, sustainable growth. Here, you'll find a place that champions growth: both professional and personal, both individual and collective.

We invest in potential, giving you the space to stretch your capabilities and turn good ideas into reality while providing the safety net of a supportive, values-driven culture. Our approach combines meaningful work with meaningful lives, offering competitive benefits, professional development, and the flexibility to thrive both in and outside the office.

What sets us apart isn't just what we do, but how we do it: with openness, integrity, and a shared commitment to doing the right thing. Join us in creating HR software that makes work better for everyone, while we make work better for you.

BambooHR is committed to the full inclusion of all qualified individuals and will ensure that persons with disabilities are provided reasonable accommodations throughout the hiring process. If you would like to request accommodations, please let your recruiter know.

BambooHR is An Equal Opportunity Employer--M/F/D/V Because our team members are trusted to handle sensitive information, we require all candidates that receive and accept employment offers to complete a background check before being hired.

For information on California Privacy Policy, click here.

Our process utilizes AI as an assistant to efficiently process and analyze candidate data. Recruiters and hiring managers maintain full oversight and accountability, ensuring that all final selection and rejection decisions are human-made and based solely on objective job qualifications. Please see our General Privacy Notice and California Privacy Notice for more details.

See our AI Guidelines for Candidates for details on how BambooHR uses AI in recruiting, how we expect candidates to use AI, and what is not allowed.

Apply About employer

Report this job