Security Engineer

RED GLOBAL-SECURITY AI ENGINEER-USA-SEATTLE-ONSITE-ASAP START-6MONTHS+

RED Global, on behalf of a Key Client Partner is currently searching for a Security Engineer with experience in Design Review, Threat Modelling & AI Agent Security for transportation customer.

Please find the details below;

• Role: Security Engineer – Design Review, Threat Modelling & AI Agent Security


• Start: ASAP


• Location: Onsite – Seattle, USA


• Duration: 6months+ extensions


• Capacity: Full time


• Language: English

Responsibilities

• Conduct security and privacy design reviews of services, applications, APIs, and AI integrations, covering architecture, data flows, trust boundaries, identity, and access controls.


• Develop threat models for critical services and AI agents, documenting attack surfaces, abuse cases, attack paths, recommended mitigations, and residual risks.


• Perform hands-on adversarial testing of third-party AI agents, including prompt-injection testing, unsafe tool-use scenarios, permission validation, excessive-agency testing, and sensitive-data exposure assessment.


• Produce clear, risk-rated, and evidence-backed findings with practical remediation guidance.


• Create and maintain reusable security-review checklists, threat-model templates, adversarial test cases, and reporting standards.


• Work within the client-defined review queue, priorities, turnaround expectations, and engineering security processes.


• Provide weekly reporting on review throughput, risk themes, remediation progress, and outstanding dependencies.


• Deliver threat models and recommendations that are actionable and accepted by responsible engineering owners

Skills;

• Strong experience in security and privacy design reviews for services, applications, APIs, cloud environments, and AI integrations.


• Proven expertise in threat modeling, including attack-surface analysis, trust-boundary identification, threat scenarios, attack paths, mitigations, and residual-risk assessment.


• Hands-on security and adversarial testing experience across applications, APIs, and third-party AI/LLM agents.


• Knowledge of AI agent security risks, including prompt injection, unsafe tool use, excessive agency, permission-scope weaknesses, guardrail bypass, and sensitive-data exposure.


• Understanding of cloud security, API security, authentication, authorization, and least-privilege design principles.


• Familiarity with STRIDE, attack trees, and MITRE ATT&CK mapping.


• Ability to document risk-rated, evidence-backed findings and clearly communicate with engineering, privacy, security, and vendor stakeholders.

If you are interested and available, please apply or send an email to tislam@redglobal.com for immediate consideration.