Security Engineer III – Security & Privacy Reviews
Location: Seattle, WA 98101 or Sunnyvale, CA 94086
Duration: 6-month contract with possibility of extension
Schedule: Monday–Friday, 8:00 AM–5:00 PM
Hours: Full-time, 40 hours per week
Work Arrangement: Hybrid
Compensation: $90–$99/hr
Employment Type: W2 (not open to C2C, 1099, or visa sponsorship)
Role Overview
Our client, a leading technology organization, is seeking an experienced Security Engineer III to identify, assess, and mitigate security and privacy risks across critical applications, cloud environments, third-party platforms, and emerging artificial intelligence technologies. This position focuses on security architecture reviews, threat modeling, penetration testing, and adversarial testing of AI agents and large language model (LLM) applications. The ideal candidate will combine hands-on security engineering expertise with software development and automation capabilities to strengthen security controls, improve assessment processes, and collaborate with cross-functional engineering teams.
Responsibilities
- Conduct security and privacy reviews of engineering proposals, system architectures, engineering requirements documents (ERDs), and application data flows.
- Evaluate security risks involving authentication, authorization, sensitive data handling, data minimization, retention, and third-party information sharing.
- Perform comprehensive threat modeling for web applications, mobile applications, APIs, cloud infrastructure, and AI systems.
- Identify potential attack paths, abuse scenarios, security vulnerabilities, and privacy risks while recommending practical mitigation strategies.
- Conduct hands-on adversarial testing of internally developed and third-party AI agents, including LLM-powered applications.
- Assess AI security vulnerabilities involving prompt injection, unauthorized tool execution, excessive permissions, sensitive data exposure, and external integrations.
- Perform targeted penetration testing across applications, APIs, cloud services, and AI agents to identify exploitable vulnerabilities.
- Develop scripts, security tools, and automated workflows to improve security assessments, threat modeling, evidence collection, and vulnerability testing.
- Collaborate with engineering, security, and privacy teams to implement security improvements and validate remediation efforts.
- Document security findings, communicate technical risks, and develop reusable security controls and guidance.
Qualifications
- 5+ years of relevant professional experience, including at least 3 years in security engineering or a related security role.
- Demonstrated experience conducting security architecture reviews, security design assessments, threat modeling, and privacy risk evaluations.
- Hands-on penetration testing experience involving applications, APIs, cloud infrastructure, and data security.
- Experience evaluating AI agents, LLM applications, or AI platforms for security vulnerabilities and privacy risks.
- Strong understanding of AI agent architectures, prompt injection, tool execution, access permissions, and sensitive data exposure.
- Proficiency in software development or scripting to build security tools and automate testing workflows.
- Strong understanding of authentication, authorization, application security, cloud security, and secure data handling.
- Ability to identify security vulnerabilities, recommend mitigation strategies, and validate remediation efforts.
- Strong analytical, problem-solving, written communication, and cross-functional collaboration skills.
- Ability to work independently and manage security assessments with minimal supervision.
- Bachelor's or master's degree in computer science, cybersecurity, or a related field, or equivalent practical experience.
Preferred Qualifications
- Experience developing AI-powered security review tools and automated security testing workflows.
- Experience assessing third-party AI platforms and vendor security readiness.
- Experience evaluating security risks associated with sensitive or business-critical data.
- Industry security certifications such as OSCP or CISSP.
- Experience developing reusable security controls and improving security assessment methodologies.