Lead Security Engineer - Penetration Testing & AI Security

About Us
HighLevel is an AI powered, all-in-one white-label sales & marketing platform that empowers agencies, entrepreneurs, and businesses to elevate their digital presence and drive growth. We are proud to support a global and growing community of over 1 million businesses, comprised of agencies, consultants, and businesses of all sizes and industries. HighLevel empowers users  with all the tools needed to capture, nurture, and close new leads into repeat customers. As of mid 2025, HighLevel processes over 4 billion API hits and handles more than 2.5 billion message events every day. Our platform manages over 470 terabytes of data distributed across five databases, operates with a network of over 250 microservices, and supports over 1 million hostnames.
 
Our People
With over 1,500 team members across 15+ countries, we operate in a global, remote-first environment. We are building more than software; we are building a global community rooted in creativity, collaboration, and impact. We take pride in cultivating a culture where innovation thrives, ideas are celebrated, and people come first, no matter where they call home.
 
Our Impact
As of mid 2025, our platform powers over 1.5 billion messages, helps generate over 200 million leads, and facilitates over 20 million conversations for the more than 1 million businesses we serve each month. Behind those numbers are real people growing their companies, connecting with customers, and making their mark - and we get to help make that happen.
 
Learn more about us on our YouTube Channel or Blog Posts
 
About the Role
We are looking for a Lead Security Engineer – Application Security & AI Security with 8+ years of cybersecurity experience and strong expertise in securing modern applications, APIs, cloud-native services, and AI-enabled systems.
Application Security and AI Security will be the primary focus of this role. You will lead security reviews, threat modeling, application assessments, secure SDLC improvements, and vulnerability management across HighLevel’s products.
You will also serve as an AI Security specialist, assessing and adversarially testing LLM applications, AI agents, RAG implementations, and AI integrations. This is a hands-on, Lead-level individual-contributor role working closely with Engineering, Product, Infrastructure, and AI/ML teams.

What You’ll Be Doing: Application Security, Secure SDLC & DevSecOps Lead Application Security initiatives across web, mobile, API, microservices, and cloud-native products. Conduct architecture reviews, threat modeling, secure design and code reviews, and hands-on security assessments. Identify weaknesses in authentication, authorization, tenant isolation, business logic, data protection, and API security. Define practical security standards, requirements, guardrails, and reusable secure engineering patterns. Improve security testing across CI/CD pipelines using SAST, DAST, SCA, secret scanning, container scanning, and Infrastructure as Code scanning. Drive risk-based vulnerability triage and remediation in partnership with engineering teams. Develop security automation and promote secure coding through developer guidance, documentation, and training. AI Security Assessment & Adversarial Testing Lead security reviews of LLM applications, AI agents, RAG architectures, machine learning services, and third-party AI integrations. Assess AI architectures, including model APIs, data pipelines, vector stores, prompts, fine-tuning workflows, plugins, and agent tool chains. Conduct adversarial testing for prompt injection, jailbreaking, sensitive-data disclosure, system-prompt leakage, output manipulation, insecure tool use, excessive agency, and model abuse. Evaluate applicable risks involving data poisoning, model inversion, training-data extraction, adversarial evasion, and model exfiltration. Test security controls such as guardrails, input/output filtering, access controls, human approvals, logging, monitoring, and abuse detec