Company Description AnnoTrace transforms early-stage, “vibe-coded” applications into resilient, production-grade systems. The company focuses on building clear, maintainable documentation layers powered by deterministic AST parsing, making complex codebases easier to understand, secure, and evolve. By combining program analysis with strong engineering practices, AnnoTrace helps teams ship safer, more reliable software. Join a company that values precision, automation, and developer experience in modern software delivery. Role Description As an AI Security Engineer at AnnoTrace, you will design and implement security controls for AI-driven and traditional software systems, with a focus on secure integration of deterministic AST parsing and related tooling. You will perform threat modeling, code reviews, and security assessments for applications that incorporate AI/ML components and automation workflows. Day-to-day, you will collaborate with engineering teams to embed security into the SDLC, define secure coding patterns, and build security guardrails around model usage, data flows, and API access. You will investigate and remediate security incidents, implement monitoring and logging for AI-powered services, and contribute to internal standards, documentation, and security runbooks. This is a full-time, remote role, with cross-functional collaboration across product, infrastructure, and developer experience teams. Qualifications Strong foundation in Cybersecurity and Information Security, including risk management, security best practices, and familiarity with common threat models and frameworks (e.g., OWASP, NIST). Hands-on experience in Application Security and Security Engineering, including secure code review, threat modeling, and building security into CI/CD pipelines. Knowledge of Network Security concepts and practices, such as segmentation, secure protocols, firewalls, VPNs, and zero-trust principles. Experience securing AI/ML systems or data-intensive applications, including model input/output validation, data privacy, and abuse/misuse prevention. Proficiency in at least one modern programming language (e.g., Python, TypeScript, Go) and comfort working with developer tooling, APIs, and cloud platforms. Ability to analyze complex systems, communicate security tradeoffs clearly, and collaborate effectively with distributed engineering teams. Bachelor’s degree in Computer Science, Engineering, Information Security, or equivalent practical experience; relevant certifications (e.g., CISSP, OSCP, GIAC) are a plus. Experience with automated code analysis, AST-based tooling, or static analysis is highly beneficial.