Fenris Creations is hiring a Lead Application Security Engineer

Responsibilities

• Develop and expand the product and application security program covering design reviews, threat modeling, code review, vulnerability management, and secure deployment.
• Collaborate with engineering teams to secure AI-native workflows, addressing data handling, prompt-injection risks, model and tool access, and sensitive legal information flows.
• Monitor emerging security trends, including AI-based offensive and defensive tactics, and provide practical recommendations for product and engineering roadmaps.
• Create effective defenses for AI-related abuse cases such as prompt injection, model misuse, data exfiltration, unsafe agent behavior, and exposure of sensitive legal data.
• Build internal security tools and automation for dependency scanning, secrets detection, access reviews, abuse detection, and security workflow triage.
• Assess architecture and product changes for security risks and assist in implementing practical fixes directly in code when necessary.
• Enhance cloud, infrastructure, and deployment security across identity, permissions, network boundaries, CI/CD, monitoring, and incident response.
• Establish security practices that enable faster development through clear standards, lightweight processes, reusable libraries, and engineer-friendly guardrails.
• Support compliance and customer trust by translating security posture into clear, accurate technical evidence.
• Maintain close engagement with the product and customers to ensure security decisions align with user workflows, business needs, and legal work sensitivity.