Security Engineer

Security EngineerLocation: Seattle, WA – Preferred / Sunnyvale, CA – Local Candidates PreferredClient: Indium TechnologiesEmployment Type: W2 Only no c2cRole OverviewWe are looking for experienced Security Engineers to support Engineering Security initiatives focused on security and privacy reviews, threat modeling, and third-party AI Agent security testing.The selected candidate will work closely with Engineering, Security, Privacy, and third-party teams to identify security risks, perform hands-on assessments, and provide actionable remediation guidance.Key ResponsibilitiesConduct security and privacy design reviews of services, applications, APIs, engineering proposals, and AI integrations.Evaluate architecture, data flows, access controls, trust boundaries, and security safeguards.Perform threat modeling for critical services and AI agents, identifying attack surfaces, threat scenarios, attack paths, mitigations, and residual risks.Conduct hands-on security testing of third-party AI agents, including:Prompt injectionTool misuseData access and permissionsExcessive agencyExternal integrationsSensitive-data exposureDocument security findings, risk assessments, supporting evidence, and practical remediation recommendations.Partner with Engineering and Security teams through remediation and validation.Develop repeatable security assessment processes, including review checklists, threat models, test cases, reporting templates, and automation workflows.Minimum Qualifications3+ years of professional experience in Security Engineering, Application Security, Product Security, Offensive Security, Systems Architecture, or a related technical security field.Experience reviewing complex technical designs and identifying security risks across applications, APIs, cloud services, microservices, or distributed systems.Strong knowledge of:Threat ModelingVulnerability ClassificationRisk ModelingAuthentication & AuthorizationLeast PrivilegeData ProtectionHands-on experience with security testing, vulnerability investigation, penetration testing, adversarial testing, or security-control validation.Strong communication skills with the ability to explain technical security findings to Engineering, Security, Privacy, and third-party stakeholders.Preferred / Good to HaveExperience assessing AI/LLM agents and AI security risks.Hands-on knowledge of prompt injection, unsafe tool use, excessive agency, and AI security testing.Experience with privacy and security design reviews.Cloud security experience across AWS, Azure, or GCP.Experience with security automation using Python, Go, Bash, or similar languages.Hands-on penetration testing and vulnerability assessment across applications, APIs, cloud infrastructure, and networks.Experience identifying and validating real-world attack paths and providing actionable remediation guidance.Note: Candidates must be able to work on W2.Local candidates in Seattle, WA or Sunnyvale, CA are strongly preferred.