Senior Security Engineer – Secure Development

About the role

The Security Engineer, Secure Development at XTIUM will lead the definition and enforcement of security standards for all internally built software, automation, and AI‑enabled solutions. This individual contributor role works across engineering, platform, and compliance teams to embed security throughout the software development lifecycle while preserving delivery speed.

Key responsibilities

• Own and enforce secure development standards for applications, platforms, automation, and tooling.
• Perform and oversee manual and automated code reviews, including static, dynamic, dependency, and supply‑chain analysis.
• Define release gates, remediation standards, and risk‑acceptance criteria for security findings.
• Conduct secure design reviews and threat‑modeling early in the development process.
• Review internally developed AI models, agents, prompts, and data pipelines for security, privacy, and misuse risks.
• Integrate security tooling (SAST, DAST, dependency scanning, container scanning, secrets detection) into CI/CD pipelines and promote shift‑left practices.
• Support compliance with SOC 2, ISO 27001, and customer‑specific security requirements, producing audit‑ready artifacts.
• Act as the primary escalation point for application security and mentor developers on secure coding.

Required profile

• Senior‑level professional with deep hands‑on experience in application security and secure development.
• Proven ability to lead security governance across multiple development teams.
• Strong understanding of AI/ML security considerations and emerging regulatory expectations.
• Experience collaborating with DevOps, platform, and compliance stakeholders.

Required skills

• SAST and DAST tools
• Dependency, container, and secrets scanning
• CI/CD pipeline integration
• Secure design reviews and threat modeling
• AI model security and data protection
• SOC 2 and ISO 27001 compliance frameworks