Principal / Staff Application Security Engineer

About this role

<div class="content-intro"><p><strong>About AiDASH</strong><br><br><span data-teams="true">AiDASH is leading the PreventionFirst™movement for electric utilities and transforming grid resilience through its pioneering platform that unifies vegetation, asset, storm, and wildfire intelligence. Powered by SatelliteFirst™ Inspection & Monitoring, AiDASH delivers comprehensive visibility across the entire grid at the right frequency and budget, using the right data modality. More than 200 customers trust AiDASH to keep the lights on, spend where it counts, and defend every decision, Securing Tomorrow across every mile of the grid.</span> Learn more at <a href="https://www.aidash.com." target="_blank">www.aidash.com.</a></p> <p><span data-contrast="auto">The PreventionFirst movement is growing, and so is the recognition behind it. In 2026, Forbes named AiDASH one of America's Best Startup Employers for the 4th consecutive year, and TIME included AiDASH among America's Top GreenTech Companies for the 3rd year in a row. </span><a href="https://www2.deloitte.com/us/en/pages/technology-media-and-telecommunications/topics/north-america-technology-fast-500.html?utm_source=bngaiwebsite&utm_medium=referral&utm_campaign=evolve-banner"><span data-contrast="none"><span data-ccp-charstyle="Hyperlink">Deloitte Technology Fast 500</span></span></a><span data-contrast="auto">™ ranked AiDASH No. 12 in the San Francisco Bay Area, and No. 59 overall in their selection of the top 500 for 2024.</span><span data-ccp-props="{"335551550":0,"335551620":0}"> </span></p> <p><span data-contrast="auto">Join us in Securing Tomorrow Together!</span><span data-ccp-props="{"335551550":0,"335551620":0}"> </span></p></div><p><strong><span data-contrast="auto"><span data-ccp-parastyle="heading 2">The Role</span></span></strong><span data-ccp-props="{"335559738":200,"335559739":100}"> </span></p> <p><span data-contrast="auto">AiDASH protects the critical infrastructure that delivers power to tens of millions of people. As we embed GenAI more deeply into our SaaS products (RAG pipelines, agentic / MCP services) and roll out AI-assisted development internally, the threat landscape is shifting fast. Autonomous adversaries, prompt injection, model exfiltration, and vibe-coded internal apps spun up by non-engineers are now part of the daily attack surface.</span><span data-ccp-props="{"335559739":120}"> </span></p> <p><span data-ccp-props="{"335559739":120}">We're hiring a Principal or Staff Application Security Engineer<span data-contrast="auto"> to be our deepest technical voice on security. In the role, you'll </span>own our AppSec program and lead AI/LLM security hardening across the platform. You'll embed security into every layer of the SDLC (from PR to production), and be the person who figures out what "secure agentic AI" actually looks like in a product that ships to critical infrastructure operators. You will report to senior leadership and work closely with Platform, ML, and DevOps across our US and India teams.</span></p> <p><strong><span data-contrast="auto"><span data-ccp-parastyle="heading 2">How you'll make an impact:</span></span></strong></p> <p><strong><span data-contrast="auto"><span data-ccp-parastyle="heading 2"><span data-ccp-parastyle="heading 3">AppSec & DevSecOps</span></span></span></strong></p> <ul> <li>Own and mature the AppSec toolchain across CI/CD — SAST, DAST, SCA, secrets scanning, and IaC policy-as-code</li> <li>Champion shift-left security: threat modeling and secure-design reviews embedded in PRs and sprint planning, not bolted on at release</li> <li>Run SBOM/AIBOM tooling; enforce risk-tiered dependency controls; extend SLSA practices to model artifacts</li> <li>Write and enforce IaC policy-as-code (OPA/Rego, Checkov, Kyverno, or equivalent) in live pipelines</li> </ul> <p><strong><span data-contrast="auto"><span data-ccp-parastyle="heading 3">AI & LLM Security</span></span></strong></p> <ul> <li>Harden production GenAI deployments on AWS (managed model APIs, agentic/MCP services) — IAM, VPC routing, prompt-layer guardrails, output filtering, rate and cost controls</li> <li>Codify OWASP LLM Top 10 and MITRE ATLAS controls into the SDLC; introduce LLM eval-as-gate in CI</li> <li>Govern internal AI-assisted developer tooling — DLP for what egresses to external model providers, sensitive-data discovery in prompts, acceptable-use telemetry</li> <li>Stand up controls for shadow AI and vibe-coded apps: discover, classify, gate with sane defaults, and bring under the SDLC</li> </ul> <p><strong>Cloud Security (AWS)</strong></p> <ul> <li>Harden AWS posture across accounts — Organizations, SCPs, Control Tower — and mature Kubernetes security (admission controllers, runtime…