Application Security Engineer

About the role

PackageX is building the execution layer for physical AI in enterprise logistics. We are looking for an Application Security Engineer who will own security across the entire software development lifecycle and help us secure AI‑powered products.

Key responsibilities

• Drive security throughout the SDLC, from threat modeling in design to security reviews during development and vulnerability scanning in CI/CD pipelines.
• Conduct vulnerability assessments and penetration tests on web applications, APIs, and cloud infrastructure.
• Write, maintain, and enforce practical security policies and standards that fit the team’s workflow.
• Identify and mitigate AI‑specific risks such as prompt injection, data leakage from model outputs, and unsafe LLM integrations.
• Review code for security issues, collaborate with developers to remediate findings, and embed security feedback into the development process.
• Report on security posture to engineering leadership, tracking gaps, trends, and open issues.

Required profile

• Deep curiosity about the evolving security landscape, especially around AI and large language models.
• Strong commitment to craftsmanship and a proactive mindset for finding and fixing security flaws.
• Ability to learn quickly, work independently, and influence engineering practices.

Required skills

• Threat modeling
• Security code review
• Vulnerability scanning
• Penetration testing
• Cloud infrastructure security
• AI/LLM security considerations