Lead, Application and AI Security Engineer

Sits within the Digital Product Security organisation and is responsible for securing a portfolio of direct-to-consumer and business-to-business applications. It drives secure-by-design development practices, establishes security guardrails for AI-enabled solutions, and advances AI-powered security capabilities across the software development lifecycle. It also builds AI-based security capabilities and leverages industry-leading solutions to protect customer applications and data across web applications, mobile applications, and application programming interfaces (APIs).

• Define and execute application and AI security strategy, policies, and roadmap across software development teams.
• Lead the integration of AI-powered security capabilities across the software development lifecycle.
• Partner with engineering teams to embed security and AI controls into developer coding platforms, CI/CD pipelines, and applications.
• Serve as the technical lead for AI security initiatives across web, mobile, API, and third-party AI service consumption.
• Develop application and AI security standards for technology that consumes, integrates, or builds AI/ML capabilities.
• Establish governance, guardrails, and security requirements for the development, deployment, and operation of GenAI, LLMs, and agentic solutions.
• Evaluate, pilot, and operationalise emerging AI security technologies.
• Define acceptable use policies, code review requirements, data protection controls, and validation processes for AI-generated code.
• Mentor developers, architects, and engineering leaders on secure application development practices.

• Bachelor's degree in computer science, IT, engineering or a related discipline with typically 8 years of cyber security experience; or a Master's degree with typically 6 years of relevant experience; or typically 12 years of relevant work experience without a degree.
• Understanding of how modern engineering teams build software using AI coding assistants, code generation platforms, and AI-powered services.
• 5+ years of application security experience.
• Strong familiarity with OWASP Top 10, OWASP API Security Top 10, OWASP Top 10 for LLM Applications, and secure AI software development practices.
• Strong familiarity with secrets detection, SAST, DAST, SCA, and API security testing.
• Experience securing AI-enabled applications, including LLMs, AI agents, MCP integrations, prompt injection defences, model governance, and data protection controls.
• Experience using AI to code scripts that leverage APIs to build custom application security solutions.
• Strong cross-functional teaming skills to coordinate and implement security enhancements with product and engineering teams.

• Candidates must reside within a commutable distance to the corporate headquarters in Baltimore, Maryland, as periodic on-site attendance may be required.
• Follows a hybrid work schedule, requiring 2–3 days in-office per week.
• Travel is required 1–2 times per year.
• Sponsorship of job applicants for employment-based work authorisation is not offered for this position at this time.
• No relocation is provided.

• Most new hires fall within this range and have the opportunity to earn more over time.
• Initial placement within the salary range is based on the individual's relevant knowledge, skills and experience for the position.
• Base salary is only one component of the competitive Total Rewards package.

• Paid 'UA Give Back' Volunteer Days: work alongside your team to support initiatives in your local community.
• Under Armour merchandise discounts.
• Competitive 401(k) plan matching.
• Maternity and parental leave for eligible and FMLA-eligible teammates.
• Health and fitness benefits, discounts and resources; programmes across the country to promote physical activity and overall well-being.

Under Armour is committed to empowering those who strive for more, and its values — Act Sustainably, Celebrate the Wins, Fight on Together, Love Athletes and Stand for Equality — serve as both a roadmap for its teams and the qualities expected of every teammate. Under Armour's values define and unite the company as the red thread that connects everyone, serve as rallying cries, and fuel everything it does. Under Armour's pursuit of better begins with innovation and its team's mission to be the best, giving teammates the freedom to go further regardless of role to develop, deliver and sell state-of-the-art products and digital tools that make top performers even better.