Senior AI & AppSec CyberSecurity Engineer

Job Requirements Sweetwater, the nation's #1 online retailer of pro audio equipment and music instruments, is seeking a Senior AI & App Sec Cyber Security Engineer to join our growing IT security team. In this senior-level role, you will design and implement the strategy behind how Sweetwater adopts new technology securely. You'll be responsible for building automated, low-friction guardrails that reduce risk without slowing teams down, and lead secure code review and threat modeling across the software development lifecycle.

This is a hands-on position where you stay current with secure coding practices in a fast-evolving development environment, leverage AI to speed up vulnerability review and triage, and mentor engineers while driving secure-by-design decisions across our organization.

This position is a role for security leaders who understand that great security is built into products from the start, not simply put in afterward. You will partner with development teams to establish secure coding standards, guide architectural decisions, and ensure that security doesn't become a roadblock to innovation.

Job Responsibilities Lead the security oversight of AI tools, platforms, and AI-powered applications adopted across the organization, including evaluating new vendors and models prior to adoption, reviewing supply chain risk, and assessing adversarial robustness while managing data handling and intellectual property considerations

Drive Application Security (App Sec) initiatives across the software development lifecycle, including secure code review, threat modeling, and security testing while leveraging automated tools to improve efficiency and coverage

Develop and maintain AI and App Sec security standards and documentation, supporting audit and regulatory compliance requirements across the enterprise

Partner with software development teams to establish and enforce secure coding standards and testing practices across the organization's applications, including standards for reviewing and validating code Support the organization's risk exception process, performing security review of policy exceptions and unusual use cases in partnership with relevant stakeholders

Mentor junior security engineers, providing technical guidance and supporting their professional development and growth within the security discipline

Identify, triage, and remediate AI governance and application security risks across Sweetwater's development program within established service levels

Stay current with emerging AI security threats and secure coding practices, and update security frameworks and documentation accordingly

Qualifications

Bachelor's degree in Computer Science, Information Security, or related field, or equivalent professional experience6+ years of cybersecurity experience, including at least 1 year focused on AI/ML security or governance and 3 years focused on application security

Demonstrated experience in AI/LLM application security, including prompt injection defense, model risk assessment, and generative AI governance frameworks

Strong background evaluating and governing AI coding agents and AI code assist platforms used across both professional software engineering and citizen development contexts

Expertise in evaluating and advising on static, dynamic, and software composition analysis (SAST/DAST/SCA) scanning practices within CI/CD pipelines

Solid understanding of user-developed, low-code/no-code, and shadow IT governance frameworks, including tiered risk models and automated policy enforcement

Strong communication and documentation skills, with the ability to translate security concepts for both technical and non-technical audiences

Hands-on experience reviewing code and conducting security…