{"id":3332601,"url":"https://alion.io/job/ksm-senior-application-ai-security-engineer","title":"Senior Application & AI Security Engineer","company":{"id":1994786,"name":"KSM","domain":"ksmcpa.com","url":"https://alion.io/company/ksmcpa","size_band":"1001-5000","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Workday","truth_index":{"grade":"A","score":94,"open_postings":4,"ghost_share":0,"stale_share":0.25,"repost_share":0,"time_to_fill_p50_days":52,"computed_at":"2026-11-01T06:10:25Z"}},"role":"Security","role_family":"Security","seniority":"senior","employment_type":"full_time","work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Indianapolis, United States"],"countries":["US"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":{"min_usd":102000,"max_usd":196000,"period":"year","method":"role_seniority_country_remote_cell","sample_n":1385},"experience_years_min":6,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"AI Agents","optional":false},{"name":"AWS","optional":false},{"name":"AWS Bedrock","optional":false},{"name":"Azure","optional":false},{"name":"CI/CD","optional":false},{"name":"LLM","optional":false},{"name":"OWASP","optional":false},{"name":"OWASP Top 10","optional":false},{"name":"Rest API","optional":false},{"name":"Threat Modeling","optional":false}],"status":"live","first_seen_at":"2026-10-26T00:00:00Z","employer_posted_date":"2026-10-26","last_verified_at":"2026-11-01T00:38:08Z","board_verified":true,"closed_at":null,"days_open":6,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":6},"description":"Job Description:\nWe’re KSM, one of the top 50 largest independent advisory, tax, and audit firms in the United States. But more than our size, it’s our people and culture that set us apart. We believe great things happen when people are supported, challenged, and given the freedom to do their very best work. That’s why we’ve built a workplace where your career and personal life can thrive together - where you have the flexibility to manage your time, the resources to grow, and a team that genuinely cares about your success.\nWe’ve been employee-owned since 2001, giving every team member a stake in our collective success. This ownership mentality fosters a culture of collaboration, curiosity, and excellence - where new ideas are welcomed, different perspectives are valued, and you’re encouraged to explore what excites you most. Whether you’re expanding your skills, tackling new challenges, or making an impact beyond the office, we provide the resources and support to help you grow in the direction that’s right for you.\nAt KSM, your contributions matter - not just to the firm, but to your colleagues, clients, and the communities we serve across the U.S. If you’re looking for a place where you can do meaningful work, build lasting relationships, and grow in ways that align with what’s most important to you, we’d love to meet you.\nPosition Summary\nThe Senior Application & AI Security Engineer is a hands-on individual contributor responsible for improving the security of KSM’s internally developed applications, APIs, AI-enabled solutions, and supporting integrations. This role partners directly with software developers, architects, and engineering teams to identify vulnerabilities, strengthen application designs, and implement and validate practical fixes. The engineer integrates security into application and AI development workflows, with particular attention to authentication, authorization, sensitive client data, and risks associated with large language models (LLMs), AI agents, and connected tools. Application and API security remain the primary focus of this position.\nKey Responsibilities\nAssess internally developed applications and APIs for vulnerabilities involving authentication, authorization, access control, and sensitive data exposure.\nPerform hands-on application security testing, source code reviews, and architecture assessments; prioritize findings by exploitability and business impact.\nPartner with developers to design and implement fixes, then independently validate that identified vulnerabilities are resolved.\nEvaluate legacy applications, integrations, and application-to-application communications for security weaknesses.\nImprove API protections, including service authentication, object-level authorization, secrets management, rate limiting, and abuse prevention.\nIntegrate practical security requirements and testing into the software development lifecycle and CI/CD pipelines.\nImplement and maintain appropriate SAST, DAST, software composition analysis, and secrets-scanning capabilities.\nEstablish secure coding guidance and reusable patterns for traditional and AI-assisted development; review significant changes before production release.\nReview application and AI architectures across AWS, Azure, and development environments, including client-data isolation and access to sensitive information.\nWork with Security and Development to strengthen application, API, and AI integration logging, monitoring, and detection of unauthorized activity.\nAssess AI-enabled applications, LLM integrations, and agent workflows for prompt injection, sensitive data disclosure, insecure tool execution, and excessive permissions.\nReview how AI systems access, process, and transmit client information; evaluate controls for AWS Bedrock and other approved AI services.\nDevelop practical security testing for AI features, including adversarial tests of LLM integrations and agent tool calls.\nSupport investigations involving application or AI integration compromise and drive corrective actions to prevent recurrence.\nTrack application security findings through remediation and communicate material risks, priorities, and progress to leadership.\nQualifications & Experience\nRequired\n6+ years of hands-on experience in software development, application security engineering, or closely related technical roles.\nStrong knowledge of web application and API security, including authentication, authorization, session management, and access control.\nDemonstrated experience identifying, remediating, and validating vulnerabilities in production applications.\nAbility to read, understand, and review application source code and collaborate directly with software developers.\nPractical experience with application security assessments, manual testing, and code reviews.\nFamiliarity with OWASP Top 10, OWASP API Security Top 10, and OWASP Top 10 for LLM Applications.\nUnderstanding of LLM application architectures, AI agent permissions, prompt injection, and the security implications of AI tool integrations.\nExperience securing REST APIs, service-to-service authentication, and application credentials.\nExperience incorporating security testing into CI/CD pipelines and software development workflows.\nAbility to work independently, prioritize effectively, and explain technical risks and remediation to developers and business stakeholders.\nPreferred\nProfessional software development experience in languages and frameworks used by KSM’s development teams.\nExperience securing applications and APIs hosted in AWS or Azure.\nExperience with SAST, DAST, software composition analysis, and secrets-scanning tools.\nExperience with application penetration testing, threat modeling, or secure architecture reviews.\nExperience protecting sensitive financial, personal, or confidential client information in multi-tenant applications.\nFamiliarity with OAuth 2.0, OpenID Connect, SAML, and modern identity integration patterns.\nExperience improving application/API logging, monitoring, and detection capabilities, including AI integrations.\nHands-on experience securing production AI applications or integrations, including AWS Bedrock or comparable platforms.\nExperience with AI security testing, adversarial evaluation, or assessing prompt injection and agent tool access.\nRelevant credentials such as OSWE, CSSLP, or GWAPT, or equivalent demonstrated expertise.\nWe are an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to age, color, sex, sexual orientation, gender identity, disability, genetic information, national origin, race, religion, veteran status, or any other protected category.\nKSM only accepts resumes directly submitted by a candidate and referrals submitted by current KSM employees. Unsolicited resumes or candidate profiles sent by staffing agencies and fee-based referral services will not be considered outside of a signed KSM vendor contract. KSM will not pay a fee to recruiters or agencies that do not have a signed KSM vendor contract.","description_format":"text","description_chars":7063,"description_truncated":false,"requirements":{"experience_years_min":6,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":[],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["Audit & Assurance Firms","Accounting & Bookkeeping Services","Tax Advisory & Preparation"],"lifecycle":[{"event":"open","at":"2026-10-27T12:27:34Z"}],"visa":[],"liveness":{"score":90,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.903,"p_room":1,"age_days":6,"expected_fill_days":52,"reasons":["conf:5","velocity","win:early"],"computed_at":"2026-11-01T06:10:25Z"},"pay":null,"html_url":"https://alion.io/job/ksm-senior-application-ai-security-engineer","json_url":"https://alion.io/job/ksm-senior-application-ai-security-engineer.json","meta":{"generated_at":"2026-11-01T11:31:38Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":17823,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-02T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":1994786},"rest":"https://alion.io/mcp/rest/get_company?id=1994786"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fksm-senior-application-ai-security-engineer"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fksm-senior-application-ai-security-engineer"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fksm-senior-application-ai-security-engineer"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/ksm-senior-application-ai-security-engineer\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fksm-senior-application-ai-security-engineer"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":3332601}},{"tool":"search_jobs","arguments":{"company":"ksmcpa.com","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":3332601},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}