Job Description
RED GLOBAL-SECURITY AI ENGINEER-USA-SEATTLE-ONSITE-ASAP START-6MONTHS+
\n
RED Global, on behalf of a Key Client Partner is currently searching for a Security Engineer with experience in Design Review, Threat Modelling & AI Agent Security for transportation customer.
\n
\n
Please find the details below;
\n
- \n
- Role: Security Engineer – Design Review, Threat Modelling & AI Agent Security
- Start: ASAP
- Location: Onsite – Seattle, USA
- Duration: 6months+ extensions
- Capacity: Full time
- Language: English
\n
\n
\n
\n
\n
\n
\n
\n
Responsibilities
\n
- \n
- Conduct security and privacy design reviews of services, applications, APIs, and AI integrations, covering architecture, data flows, trust boundaries, identity, and access controls.
- Develop threat models for critical services and AI agents, documenting attack surfaces, abuse cases, attack paths, recommended mitigations, and residual risks.
- Perform hands-on adversarial testing of third-party AI agents, including prompt-injection testing, unsafe tool-use scenarios, permission validation, excessive-agency testing, and sensitive-data exposure assessment.
- Produce clear, risk-rated, and evidence-backed findings with practical remediation guidance.
- Create and maintain reusable security-review checklists, threat-model templates, adversarial test cases, and reporting standards.
- Work within the client-defined review queue, priorities, turnaround expectations, and engineering security processes.
- Provide weekly reporting on review throughput, risk themes, remediation progress, and outstanding dependencies.
- Deliver threat models and recommendations that are actionable and accepted by responsible engineering owners
\n
\n
\n
\n
\n
\n
\n
\n
\n
\n
Skills;
\n
- \n
- Strong experience in security and privacy design reviews for services, applications, APIs, cloud environments, and AI integrations.
- Proven expertise in threat modeling, including attack-surface analysis, trust-boundary identification, threat scenarios, attack paths, mitigations, and residual-risk assessment.
- Hands-on security and adversarial testing experience across applications, APIs, and third-party AI/LLM agents.
- Knowledge of AI agent security risks, including prompt injection, unsafe tool use, excessive agency, permission-scope weaknesses, guardrail bypass, and sensitive-data exposure.
- Understanding of cloud security, API security, authentication, authorization, and least-privilege design principles.
- Familiarity with STRIDE, attack trees, and MITRE ATT&CK mapping.
- Ability to document risk-rated, evidence-backed findings and clearly communicate with engineering, privacy, security, and vendor stakeholders.
\n
\n
\n
\n
\n
\n
\n
\n
\n
If you are interested and available, please apply or send an email to tislam@redglobal.com for immediate consideration.
\n