Note: The job is a remote job and is open to candidates in USA. Under Armour is a global sportswear and digital products company committed to innovation and empowering athletes. The Lead Application and AI Security Engineer will secure the company’s web, mobile, API, and AI-enabled applications by defining security strategy, embedding controls across the software development lifecycle, and establishing governance for GenAI, LLMs, and agentic solutions. The role will also evaluate emerging technologies and mentor engineering teams on secure application development.
Responsibilities
- Define and execute our application and AI security strategy, policies, and roadmap across all of our software development teams
- Lead the integration of AI-powered security capabilities across the software development lifecycle
- Partner with engineering teams to embed security and AI controls into developer coding platforms, CI/CD pipelines, and applications
- Serve as the technical lead for AI security initiatives across web, mobile, API, and third-party AI service consumption
- Develop application and AI security standards for technology that consumes, integrates, or builds AI/ML capabilities
- Establish governance, guardrails and security requirements for the development, deployment, and operation of GenAI, LLMs, and agentic solutions
- Evaluate, pilot, and operationalize emerging AI security technologies
- Define acceptable use policies, code review requirements, data protection controls, and validation processes for AI-generated code
- Mentor developers, architects, and engineering leaders on secure application development practices
Skills
- Bachelor's degree in computer science/IT/engineering or a related discipline with typically 8 years of cyber security experience or Master's degree with typically 6 years of relevant experience or typically 12 years of relevant work experience without degree
- Understanding of how modern engineering teams build software using AI coding assistants, code generation platforms, and AI-powered services
- Requires 5+ years of application security experience
- Strong familiarity with OWASP Top 10, OWASP API Security Top 10, OWASP Top 10 for LLM Applications, and secure AI software development practices
- Strong familiarity with secrets detection, SAST, DAST, SCA, & API security testing
- Experience securing AI-enabled applications, including LLMs, AI agents, MCP integrations, prompt injection defenses, model governance, and data protection controls
- Experience using AI to code scripts that leverage APIs to build custom application security solutions
- Strong cross-functional teaming skills to coordinate and implement security enhancements with product and engineering teams
- UA does not offer sponsorship of job applicants for employment-based work authorization for this position at this time
Benefits
- Remote with periodic on-site attendance
- Paid "UA Give Back" Volunteer Days: Work alongside your team to support initiatives in your local community
- Under Armour Merchandise Discounts
- Competitive 401(k) plan matching
- Maternity and Parental Leave for eligible and FMLA-eligible teammates
- Health & fitness benefits, discounts and resources- We offer teammates across the country programs to promote physical activity and overall well-being
Company Overview