{"id":3479459,"url":"https://alion.io/job/liftoff-application-security-engineer-generative-ai","title":"Application Security Engineer, Generative AI","company":{"id":17308,"name":"Liftoff","domain":"liftoff.ai","url":"https://alion.io/company/liftoff","size_band":null,"is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Greenhouse","truth_index":null},"role":"Security","role_family":"Security","seniority":"senior","employment_type":"full_time","work_mode":"remote","remote_scope":"stated_countries","remote_scope_basis":"posting_text","remote_working_hours":null,"hiring_geo_confidence":"inferred","locations":["United States"],"countries":["US"],"hiring_countries":["US","CA"],"hiring_countries_total":2,"salary":null,"salary_estimate":{"min_usd":149000,"max_usd":268000,"period":"year","method":"role_seniority_country_remote_cell","sample_n":390},"experience_years_min":5,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"CI/CD","optional":false},{"name":"Threat Modeling","optional":false},{"name":"Clojure","optional":true},{"name":"JavaScript","optional":true},{"name":"Python","optional":true}],"status":"live","first_seen_at":"2026-10-29T16:13:32Z","employer_posted_date":"2026-10-29","last_verified_at":"2026-11-07T09:42:41Z","board_verified":true,"closed_at":null,"days_open":8,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":8},"description":"Liftoffis a leading AI-powered performance marketing platform for the mobile app economy. Our end-to-end technology stack helps app marketers acquire and retain high-value users, while enabling publishers to maximize revenue across programmatic and direct demand.\nLiftoff’s solutions, including Accelerate, Direct, Monetize, Intelligence, and Vungle Exchange, support over 6,600 mobile businesses across 74 countries in sectors such as gaming, social, finance, ecommerce, and entertainment. Founded in 2012 and headquartered in Redwood City, CA, Liftoff has a diverse, global presence.\nAbout Liftoff Security Team\nThe Liftoff Security team protects Liftoff's customers, users, and employees. We architect Liftoff's security posture, build the tools and systems that defend it, and partner with engineering teams as they ship new products and features. Our work spans the entire stack - infrastructure, web, mobile, and IT - and we approach security from a software engineering standpoint, scaling our impact through automation and well-designed tools. This individual contributor role reports to the Director of Security and owns application security for GenAI, Creative GenAI, and emerging businesses. Application security is the primary focus; you will also contribute across cloud and infrastructure security, support Accelerate and MX as priorities change, and share the team's on-call and incident-response work.\nResponsibilities\nEstablish secure software development standards and integrate security into engineering design and development.\nCreate self-service paths for engineering teams to build and deploy securely through documented review workflows, reusable tools, and secure design patterns.\nPerform design and code reviews, threat modeling, and security assessments for GenAI, Creative GenAI, and emerging businesses, including sandbox design and isolation.\nPartner with stakeholders across the organization to build a culture of security-minded builders.\nTriage incoming security issues, prioritize vulnerabilities by risk, and work with engineering teams through timely remediation and verification.\nAssess vendors and AI tools to ensure their security controls and product features support secure employee use.\nShare the security team's on-call and incident-response rotation, including occasional off-hours response.\nConduct blameless post-incident reviews, document findings, and follow through on remediation.\nBuild maintainable security tools and automation, including an AI-assisted code-security triage pilot that produces actionable findings at a false-positive rate engineering will accept.\nPartner with Detection & Response to turn application-security findings and threat models into detection improvements and response guidance.\nContribute across application, cloud, and infrastructure security as priorities change, including Accelerate and MX.\nMinimum qualifications\n5+ years of relevant experience in security engineering or software engineering.\nExcellent judgment in prioritizing security efforts using a risk-based approach.\nExperience partnering with cross-functional teams to deliver security improvements and help engineers choose practical fixes.\nWrite production-quality code for security tools and automation, review pull requests, and navigate large, unfamiliar codebases.\nStrong understanding of secure software design, application and API security, authentication and authorization, threat modeling, and code review.\nExperience assessing cloud and infrastructure security and contributing beyond a primary application-security specialty.\nAbility to quickly understand complex engineering systems and architecture.\nPractical software engineering habits: testing, observability, version control, peer code review, continuous integration, and blameless postmortems.\nStrong technical writing: design documents, proposals, runbooks, and post-incident reviews that support engineering decisions. Explain security risks and tradeoffs clearly in writing and conversation.\nWillingness to share the security team's on-call and incident-response responsibilities, including occasional off-hours response.\nDesirable qualifications\nExperience with Go, Python, Clojure, or JavaScript; ability to work across languages matters more than a specific language.\nExperience securing GenAI applications, designing sandboxes, or evaluating AI-assisted security tools and their output.\nExperience scaling cloud security or working with high-velocity software engineering teams, mobile advertising, or other high-volume SaaS environments.\nWhy This Role is Exciting\nHigh Visibility & Impact: Be a core member of a security team with significant influence.\nDiverse & Challenging Projects: Engage in various domains including product security, vendor security, corporate security, and infrastructure security.\nSecurity-Conscious Engineering Culture: Collaborate with engineering teams that value security and are eager to partner on initiatives.\nLarge-Scale Systems & Technical Challenges: Tackle complex security challenges across Liftoff’s infrastructure and applications.\nHands-On Technical work: Stay deeply involved in technical security efforts, from writing and reviewing code to architecting secure solutions.\nWorking at Liftoff is fast-paced, fun, and challenging, and we thrive on innovation. Come join our team and help shape the future of the mobile app ecosystem. If this role sounds interesting to you, we would love to hear from you! \nLocations:\nThis role is eligible for full-time remote work in one of our entities/states and Canada: CA, CO, ID, IL, FL, GA, MA, MI, MN, MO, NJ, NV, NY, OR, PA, TX, UT, and WA.\nWe are a remote-first company with US hubs in Redwood City, Los Angeles, and New York City.\nTravel Expectations:\nWe offer several opportunities for in-person team gatherings, including but not limited to project meetings, regional meetups, and company-wide events. We expect our employees to attend these gatherings at least once per quarter. These gatherings provide essential opportunities for collaboration, communication, and team building.\nCompensation:\nThe following are our base salary ranges for this role:\nSF Bay Area, Los Angeles/Orange County, NYC, Seattle: $200,000 - $250,000 plus bonus\nAll other cities and towns in our approved states: $184,000 - $220,000 plus bonus\nWe use Covey as part of our hiring and/or promotional process for jobs in NYC and certain features may qualify it as an AEDT. As part of the evaluation process, we provide Covey with job requirements and candidate-submitted applications. We began using Covey Scout for Inbound on January 22, 2024.\nPlease see the independent bias audit report covering our use of Covey here.\nLiftoff offers a fast-paced, collaborative, and innovative work environment where employees are empowered to grow and make an impact. We’re shaping the future of the mobile app ecosystem-join us and help accelerate what’s next.\nLiftoff’s compensation strategy includes competitive salaries, equity, and benefits designed to support employee well-being and performance. We benchmark compensation based on role, level, and location to ensure fairness and market alignment. Benefits may include medical coverage, wellness stipends, and additional perks based on your country of residence.\nLiftoff is an equal opportunity employer. We are committed to creating an inclusive environment for all employees and applicants regardless of race, ethnicity, national origin, age, marital status, disability, sexual orientation, gender identity, religion, veteran status, or any other characteristic protected by applicable law.\nAgency and Third Party Recruiter Notice:\nLiftoff does not accept unsolicited resumes from individual recruiters or third-party recruiting agencies in response to job postings. No fee will be paid to third parties who submit unsolicited candidates directly to our hiring managers or Recruiting Team. All candidates must be submitted via our Applicant Tracking System by approved Liftoff vendors who have been expressly requested to make a submission by our Recruiting Team for a specific job opening. No placement fees will be paid to any firm unless such a request has been made by the Liftoff Recruiting Team and such a candidate was submitted to the Liftoff Recruiting Team via our Applicant Tracking System.","description_format":"text","description_chars":8326,"description_truncated":false,"requirements":{"experience_years_min":5,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":["Equity"],"hiring_locations":[{"name":"United States","iso":"US","kind":"country"},{"name":"Canada","iso":"CA","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Application Security","Advertising","Marketing & Sales AI"],"lifecycle":[{"event":"open","at":"2026-10-29T19:46:23Z"}],"visa":[],"liveness":{"score":90,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.903,"p_room":1,"age_days":8,"expected_fill_days":46,"reasons":["conf:0","velocity","win:early"],"computed_at":"2026-11-07T05:47:08Z"},"pay":null,"html_url":"https://alion.io/job/liftoff-application-security-engineer-generative-ai","json_url":"https://alion.io/job/liftoff-application-security-engineer-generative-ai.json","meta":{"generated_at":"2026-11-07T09:53:54Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":8266,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-08T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":17308},"rest":"https://alion.io/mcp/rest/get_company?id=17308"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fliftoff-application-security-engineer-generative-ai"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fliftoff-application-security-engineer-generative-ai"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fliftoff-application-security-engineer-generative-ai"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/liftoff-application-security-engineer-generative-ai\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fliftoff-application-security-engineer-generative-ai"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":3479459}},{"tool":"search_jobs","arguments":{"company":"liftoff.ai","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":3479459},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}