Application Security Engineer - AI & Product Security

Description

Artlist is a leading creative technology company on a mission to empower creators and brands to bring their vision to life with video. Offering cutting-edge AI tools and models for image, video, and voiceover creation, alongside high-quality creative assets and powerful editing tools, Artlist enables creators to stay on trend and achieve their creative goals.

Trusted by over 30 million creators worldwide and top brands including Google, Amazon, Microsoft, and Versace, Artlist provides a seamless, subscription-based platform with a global license, giving creators everything they need to produce professional video content efficiently. For more information, visit artlist.io.

About the role

We're looking for an Application Security Engineer to join Artlist's security team and work closely with Product and R&D on securing our applications, development processes, and AI-powered products.

This is a hands-on engineering role for someone with a strong Application Security foundation who enjoys working directly with developers, building security automation, and helping teams design and ship secure products.

You'll work across Application Security, cloud security, and AI-related security challenges, with significant ownership and the opportunity to shape how security is implemented across Artlist.

What you'll do

• Partner with R&D and Product on threat modeling and secure design reviews.
• Embed security controls into the SDLC and CI/CD pipelines.
• Identify and remediate application and API security risks.
• Integrate and improve security tooling such as SAST, SCA, WAF and cloud security tools.
• Build security automation and internal tooling using Python, Bash or similar languages.
• Help secure cloud environments and production applications.
• Define practical security guardrails around authentication, authorization, data exposure, injection risks and rate limiting.
• Contribute to the security of AI-powered product features, including risks such as prompt injection, data leakage and model access.
• Support incident response and remediation when application or cloud security issues arise.

Requirements

• 3+ years of hands-on experience in Application Security, Product Security or DevSecOps, with meaningful Application Security responsibilities.
• Experience working directly with software engineers on secure development and remediation.
• Good understanding of Web and API security, OWASP principles and common application security vulnerabilities.
• Experience integrating security into CI/CD or SDLC processes.
• Hands-on experience with AWS, GCP or Azure.
• Scripting or automation experience with Python, Bash, Go or similar.
• Ability to work independently and collaborate closely with R&D and Product teams.
• Fluent English.

Nice to have

• Experience securing AI/LLM or generative AI features.
• Experience with threat modeling.
• Experience with WAF, rate limiting, bot protection or DDoS mitigation.
• Familiarity with SAST, SCA, DAST or cloud security platforms.
• Experience with AI gateways such as LiteLLM, OpenRouter or Amazon Bedrock.
• Familiarity with SOC 2 or ISO 27001.
• Relevant security certifications.