AI Application Security Engineer

The ideal candidate will have strong hands-on experience in Application Security, secure coding, API security, cloud-native applications, and modern AI application architectures, with understanding of AI-related risks such as prompt injection, insecure outputs, data leakage, insecure plugins, and retrieval poisoning.

This role will support secure AI application development, architecture reviews, AI application security testing, and implementation of scalable application-layer security controls to enable secure enterprise AI adoption.

Your Opportunity

NXP is a global player in Semiconductor industry, and security is an essential and integral part of our business.

Job Responsibility

• Conduct application security assessments and secure design reviews for AI-powered applications and GenAI solutions
• Review AI integrations involving APIs, plugins, RAG pipelines, vector databases, and enterprise applications
• Evaluate risks related to prompt injection, insecure outputs, data leakage, insecure APIs, and retrieval poisoning
• Support secure software development lifecycle (SSDLC) practices for AI applications and AI-enabled development workflows
• Collaborate with engineering teams to implement secure coding practices, application-layer controls, and secure authentication and authorization mechanisms
• Support AI application penetration testing, API security testing, and remediation activities
• Assist with validating secure use of AI coding assistants and AI-enabled development tools
• Support implementation of controls aligned with NIST AI RMF, OWASP Top 10 for LLM Applications, and secure application engineering practices

Job Qualification

Desired Education

• Bachelor’s degree in computer science, Cybersecurity, Engineering, Information Technology, or a related field
• Advanced degrees such as Masters are preferred

Professional Experience

• 5+ years of experience in Cybersecurity, Application Security, Runtime Security, or related engineering roles
• 2+ years of experience supporting or securing AI/ML/GenAI applications or platforms
• Experience with secure software development lifecycle (SSDLC), security testing, and cloud-native security practices
• Experience with AI/ML platforms, APIs, orchestration frameworks, or AI-assisted development environments
• Familiarity with cloud platforms such as AWS or Azure

Technical Skills

• Understanding of AI/ML/GenAI concepts including LLMs, RAG architectures, APIs, vector databases, and AI-assisted applications
• Knowledge of application security principles including secure coding, API security, authentication and authorization, and tenant isolation
• Knowledge of AI-related attack vectors including prompt injection, insecure outputs, insecure plugins, and retrieval poisoning
• Familiarity with OWASP Top 10 for LLM Applications, OWASP ASVS, MITRE ATLAS, and NIST AI RMF concepts
• Knowledge of cloud-native application security, container security, IAM, secrets management, and software security principles

Soft Skills

• Strong analytical and problem-solving skills
• Excellent communication and collaboration abilities
• Ability to manage multiple initiatives in a fast-paced environment

Certifications (Preferred)

• AI/ML-related and cybersecurity certifications are considered a plus

More information about NXP in the United States...

NXP is an Equal Opportunity/Affirmative Action Employer regardless of age, color, national origin, race, religion, creed, gender, sex, sexual orientation, gender identity and/or expression, marital status, status as a disabled veteran and/or veteran of the Vietnam Era or any other characteristic protected by federal, state or local law. In addition, NXP will provide reasonable accommodations for otherwise qualified disabled individuals.

#LI-97b2