Senior Application Security Engineer (AI)

About Ki

Ki is innovating in the insurance industry, disrupting a 335-year-old market with digital solutions. Known for insuring cutting-edge ventures such as space shuttles, world tours, wind farms, and even athlete injuries, Ki is the largest global algorithmic insurance carrier and the fastest expanding syndicate in Lloyd's of London. Partnering with Google and UCL, Ki developed a platform utilizing algorithms, machine learning, and large language models to provide insurance quotes in seconds rather than days. The company boasts $100 million in profit in just three years and fosters a collaborative, agile environment with diverse teams aiming for ambitious growth.

Role Overview

As the Senior Application Security Engineer focused on AI, you will empower engineering and product teams to securely adopt AI technologies by embedding rigorous security controls into services and workflows. You will design cloud-native security guardrails and automate security processes, making the secure options the default for developers. Your responsibilities span the entire development lifecycle, protecting complex AI and LLM integrations as well as common internal tools. You will be a trusted expert collaborating across product groups to build a proactive and risk-aware security culture, mentoring team members, performing threat modeling, and helping the company scale securely while revolutionizing the global insurance market.

Key Responsibilities

• Advise practical security implementations for AI-powered applications in alignment with security frameworks such as OWASP ASVS and the OWASP Top 10 for LLM apps.
• Lead threat modeling for AI and agentic systems using STRIDE and tailored AI security frameworks during the design phase.
• Create secure guardrails, allowlists, telemetry, and safe default configurations for developer AI tools.
• Oversee security testing throughout the SDLC, including scanning for conventional and AI-specific vulnerabilities like prompt injection and data leakage.
• Coordinate penetration testing, vulnerability management, and cloud security posture efforts across Google Cloud Platform and Azure.
• Develop automation by contributing code to security infrastructure and tools supporting cloud platforms.
• Promote security best practices by facilitating a Security Champions network, organizing discussions, and delivering AI safety training.
• Document processes, share expertise, and provide mentorship to grow security capabilities company-wide.
• Provide feedback on architectural security and lead technical security conversations.

Candidate Requirements

• Proficient coding skills, especially in Python, TypeScript, Kotlin, and Terraform, with experience in software development, site reliability engineering, DevOps, or security engineering.
• Deep knowledge of securing AI/LLM-based applications, agentic tooling, and developer AI utilities, including defenses against prompt injection, managing integration risks, establishing guardrails, telemetry, and working with frontier AI models via APIs or local deployments.
• Hands-on experience with agentic development using coding harnesses.
• Strong familiarity with major public cloud platforms, especially Google Cloud Platform, with beneficial experience in Azure or AWS, and sound understanding of network infrastructure.
• Well-versed in Kubernetes, Docker, and container security practices.
• Experience designing and managing security testing programs such as SCA, SAST, and DAST integrated into CI/CD pipelines like GitHub Actions, alongside release packaging and artifact management.
• Skill in creating secure and automated cloud infrastructure using Terraform.
• A motivation to learn about offensive and defensive security aspects continuously.
• Ability to thrive in enterprise-wide agile teams through collaborative work.
• Excellent communication abilities, capable of explaining intricate vulnerabilities to both technical teams and business stakeholders while mentoring colleagues.

Benefits and Recruitment Process

Ki offers a competitive salary paired with a comprehensive benefits package, regularly reviewed to stay current and rewarding exceptional efforts by individuals and teams. The recruitment process includes an initial screening call, an interview with the hiring manager, a technical interview, and a values-based interview.