Capital Group
Capital Group
5,001 – 10,000 Employees
H1B Visa SponsorB2CFinanceFintech
Founded in 1931, Capital Group is a global investment management firm serving millions of investors. The company operates across multiple countries and provides investment solutions designed to support a wide range of client financial goals and needs.

Senior AI Application Security Engineer at Capital Group – New York City Onsite

Lead application security for Capital Group’s enterprise AI platforms in an onsite senior engineering role. Build AI security controls, threat models, automated code analysis, and incident-response practices.

Description

  • Partner with application teams to secure custom-built and third-party AI solutions
  • Build or source security solutions that advance Capital Group’s enterprise AI strategy
  • Work with platform engineering, security engineering, and risk teams to enable secure AI adoption at scale
  • Apply agentic tools for code reviews and data-flow modeling
  • Define threats and countermeasures, then translate them into application security requirements
  • Advise teams across the organization and reinforce AI security practices
  • Build or procure automated security checks for the AI SDLC and MLOps processes
  • Threat-model complex AI and agentic systems with developers, architects, and business stakeholders
  • Identify security vulnerabilities in AI-enabled applications through code review
  • Shape AI information-security policies and standards alongside technology-risk teams
  • Provide AI and agent expertise during security reviews and AI-related incidents
  • Contribute to incident-response playbooks for AI security events

Requirements

  • At least eight years of relevant information-security experience
  • Expertise in one or more areas such as application security, platform security, penetration testing, DevSecOps, or network security
  • Related technical experience or demonstrated security leadership may satisfy the experience requirement
  • Strong understanding of security and safety risks affecting large language models and AI agents, including OWASP LLM Top 10, MITRE ATLAS, and NIST RMF
  • At least five years of automating SAST, SCA, and DAST checks within CI/CD pipelines
  • Extensive experience using STRIDE or comparable threat-modeling frameworks
  • Experience working in agile environments, including Scrum or Kanban
  • Proficiency in Python, Java, or .NET
  • Ability to build effective partnerships with stakeholder teams
  • Clear communication skills and the ability to explain security risks to leaders
  • Ability to learn rapidly and use agentic tools under pressure while managing multiple assessments and tasks
  • Preferred: Experience with Kubernetes, containers, CI/CD, and cloud providers
  • Preferred: Familiarity with AI gateways such as Kong, Databricks Mosaic AI Gateway, or custom API orchestration
  • Preferred: Familiarity with LangChain, LlamaIndex, or similar model-orchestration tools
  • Preferred: Familiarity with NIST AI RMF, MITRE ATLAS, GDPR, and EU AI Act frameworks
  • Preferred: Information-security certification such as CISSP, SANS GIAC, or CISA

Benefits

  • Competitive compensation
  • Individual annual performance bonus
  • Annual profitability bonus
  • Retirement plan with a 15% employer contribution on eligible earnings
  • Generous paid time away and health coverage available from the start
  • Flexible work arrangements
  • Two-for-one matching for charitable donations
  • Potential annual grants for charitable organizations
  • On-demand professional development resources
  • Compensation and benefits remain subject to applicable plan terms, restrictions, and vesting requirements

Related Jobs