Senior AI AppSec Engineer

• 5+ years of experience in application security with hands-on experience in security assessments, penetration testing, and secure code review.
• Deep expertise in AI-native security, including advanced defense mechanisms against prompt injection, LLM production hardening, and adversarial machine learning.
• Experience securing agentic coding workflows and establishing robust guardrails for AI-generated code.
• A true "hacker" mindset with a proven track record of finding and exploiting complex vulnerabilities to build stronger defenses.
• Proficiency in utilizing modern AI assistants to accelerate your own daily workflows, including code analysis and vulnerability remediation.
• Proficiency in at least one programming language in Fabric's stack, such as Ruby, Python, or JavaScript/TypeScript.
• Experience integrating SAST and DAST tooling into CI/CD pipelines.
• Deep understanding of the OWASP Top 10, threat modeling methodologies, and common application vulnerabilities.
• Familiarity with cloud security in AWS environments and an understanding of HIPAA or other regulated industry security requirements.

• Experience securing healthcare applications or working with PHI.
• Familiarity with EHR integration security including FHIR, HL7, Epic, or Cerner APIs.
• Security certifications such as OSCP, GWEB, or BSCP.
• Experience with bug bounty program management.
• SOC 2 or HITRUST audit support experience.

The national pay range for this role is $130,000.00 – $160,000.00 per year.

Actual compensation will be determined by factors such as the candidate's geographic market, experience, skills, and qualifications.

Certain roles may also be eligible for additional compensation, including a comprehensive benefits package such as medical, dental, vision, unlimited PTO, and a 401(k) plan, stock options and bonuses.

If your compensation requirement is greater than our posted range, please still consider applying; a determination can be made based on unique qualifications.

Expected compensation ranges for this role may change over time.

At Fabric, we believe that a diverse workforce is essential to our success.

We are an equal opportunity employer and are committed to creating an inclusive environment for all employees.

We do not discriminate on the basis of race, color, religion, sex, national origin, age, disability, veteran status, or any other legally protected characteristic.

We actively encourage individuals from all backgrounds to apply.

• Verify the Domain: Official recruitment emails will only come from addresses ending in @fabrichealth.com or @gem.com . No other domain names are legitimate.
• Official Interview Tools: We use Gem for our recruitment process and Google Meet for all video interviews. Google Meet is always the platform used for your first interview; you will never be sent a Zoom link to set up or conduct an initial interview. All interviews are conducted via video unless specifically stated by our team as an audio call. We never conduct interviews via chat, social media, Skype, or WhatsApp.
• Zoom Usage: Zoom is utilized only for specific meetings set directly by our team for purposes outside of the standard interview process (e.g., coordination or onboarding discussions). It is never the first link you will receive from us.
• Authorized Contact & Texting: Fabric will only contact you if you have submitted an application or if you are connected to a current employee who shared your information with us. We will only send text messages if you have provided explicit authorization and consent, either through your application or while communicating directly with our team. If you have not explicitly authorized us to reach out, treat any SMS or unsolicited outreach as fraudulent and do not respond.
• Sensitive Data: We will never ask you for sensitive personal or financial documents (ID, banking info, SSN) during the application, interview, or candidacy stages. All sensitive data is handled through secure internal systems post-offer.
• Verify the Team: You can reference LinkedIn to verify members of our recruiting team; however, please remain vigilant as scammers may create fraudulent profiles. Always cross-reference the sender's email domain with our official @fabrichealth.com address.