Job description

Values & Innovation At Under Armour, we are committed to empowering those who strive for more, and the company's values - Act Sustainably, Celebrate the Wins, Fight on Together, Love Athletes and Stand for Equality - serve as both a roadmap for our teams and the qualities expected of every teammate. Our Values define and unite us, the beliefs that are the red thread that connects everyone at Under Armour. Our values are rallying cries, reminding us why we're here, and fueling everything we do. Our pursuit of better begins with innovation and with our team's mission of being the best. With us, you get the freedom to go further - no matter your role. That means developing, delivering, and selling the state-of-the-art products and digital tools that make top performers even better. If you are a current Under Armour teammate, apply to this position on the Internal Career Site Here. Purpose of Role As a Lead Application and AI Security Engineer in our Digital Product Security organization, you will secure Under Armour’s portfolio of Direct-to-Consumer & Business-to-Business applications. As a secure software and AI security leader, you will drive secure-by-design development practices, establish security guardrails for AI-enabled solutions, and advance AI-powered security capabilities across our software development lifecycle. You will also build AI-based security capabilities and leverage industry-leading solutions to protect our customer applications and data spanning web applications, mobile applications, and application programming interfaces (APIs). Your Impact • Define and execute our application and AI security strategy, policies, and roadmap across all of our software development teams • Lead the integration of AI-powered security capabilities across the software development lifecycle • Partner with engineering teams to embed security and AI controls into developer coding platforms, CI/CD pipelines, and applications • Serve as the technical lead for AI security initiatives across web, mobile, API, and third-party AI service consumption • Develop application and AI security standards for technology that consumes, integrates, or builds AI/ML capabilities • Establish governance, guardrails and security requirements for the development, deployment, and operation of GenAI, LLMs, and agentic solutions • Evaluate, pilot, and operationalize emerging AI security technologies • Define acceptable use policies, code review requirements, data protection controls, and validation processes for AI-generated code • Mentor developers, architects, and engineering leaders on secure application development practices Qualifications • Bachelor's degree in computer science/IT/engineering or a related discipline with typically 8 years of cyber security experience or Master's degree with typically 6 years of relevant experience or typically 12 years of relevant work experience without degree • Understanding of how modern engineering teams build software using AI coding assistants, code generation platforms, and AI-powered services • Requires 5+ years of application security experience • Strong familiarity with OWASP Top 10, OWASP API Security Top 10, OWASP Top 10 for LLM Applications, and secure AI software development practices • Strong familiarity with secrets detection, SAST, DAST, SCA, & API security testing • Experience securing AI-enabled applications, including LLMs, AI agents, MCP integrations, prompt injection defenses, model governance, and data protection controls • Experience using AI to code scripts that leverage APIs to build custom application security solutions • Strong cross-functional teaming skills to coordinate and implement security enhancements with product and engineering teams Workplace Location • Location: Candidates must reside within a commutable distance to our corporate headquarters in Baltimore, Maryland, as periodic on-site attendance may be required • Work Schedule: This role follows a hybrid work schedule, requiring 2-3 days in-office per week. • Travel: 1-2 times per year • Sponsorship Eligibility: UA does not offer sponsorship of job applicants for employment-based work authorization for this position at this time. Relocation No relocation provided • #LI-CP1 • #LI-HYBRID • Base Compensation $155,000.00-$200,000.00 USD Most new hires fall within this range and have the opportunity to earn more over time. Initial placement within the salary range, however, is based on an individual's relevant knowledge, skills and experience for the position. UA is committed to helping our teammates succeed and advance in their careers. Base salary is only one component of our competitive Total Rewards package. Benefits & Perks • Paid "UA Give Back" Volunteer Days: Work alongside your team to support initiatives in your local community • Under Armour Merchandise Discounts • Competitive 401(k) plan matching • Maternity and Parental Leave for eligible and FMLA-eligible teammates • Health & fitness benefits, discounts and resources- We offer teammates across the country programs to promote physical activity and overall well-being Our Commitment to Equal Opportunity At Under Armour, we are committed to providing an environment of mutual respect where equal employment opportunities are available to all applicants and teammates without regard to race, color, religion or belief, sex, pregnancy (including childbirth, lactation and related medical conditions), national origin, age, physical and mental disability, marital status, sexual orientation, gender identity, gender expression, genetic information (including characteristics and testing), military and veteran status, family or paternal status and any other characteristic protected by applicable law. Under Armour seeks to recruit, develop and retain the most talented people representing a wide variety of backgrounds and perspectives. If a reasonable accommodation is needed to participate in the job application or interview process, please contact our Human Resources team via candidateaccommodations@underarmour.com.

Requirements

Must-haves

Values & Innovation
Our Values define and unite us, the beliefs that are the red thread that connects everyone at Under Armour. Our values are rallying cries, reminding us why we're here, and fueling everything we do.
If you are a current Under Armour teammate, apply to this position on the Internal Career Site Here.
Purpose of Role
Define and execute our application and AI security strategy, policies, and roadmap across all of our software development teams
Lead the integration of AI-powered security capabilities across the software development lifecycle
Partner with engineering teams to embed security and AI controls into developer coding platforms, CI/CD pipelines, and applications
Serve as the technical lead for AI security initiatives across web, mobile, API, and third-party AI service consumption
Develop application and AI security standards for technology that consumes, integrates, or builds AI/ML capabilities
Establish governance, guardrails and security requirements for the development, deployment, and operation of GenAI, LLMs, and agentic solutions
Evaluate, pilot, and operationalize emerging AI security technologies
Define acceptable use policies, code review requirements, data protection controls, and validation processes for AI-generated code
Mentor developers, architects, and engineering leaders on secure application development practices
Understanding of how modern engineering teams build software using AI coding assistants, code generation platforms, and AI-powered services
Requires 5+ years of application security experience
Strong familiarity with OWASP Top 10, OWASP API Security Top 10, OWASP Top 10 for LLM Applications, and secure AI software development practices
Strong familiarity with secrets detection, SAST, DAST, SCA, & API security testing
Experience securing AI-enabled applications, including LLMs, AI agents, MCP integrations, prompt injection defenses, model governance, and data protection controls
Experience using AI to code scripts that leverage APIs to build custom application security solutions
Strong cross-functional teaming skills to coordinate and implement security enhancements with product and engineering teams
Workplace Location
Location: Candidates must reside within a commutable distance to our corporate headquarters in Baltimore, Maryland, as periodic on-site attendance may be required
Work Schedule: This role follows a hybrid work schedule, requiring 2-3 days in-office per week.
Travel: 1-2 times per year

Nice-to-haves

None flagged.

Application prep

Use the role’s language and application details while tailoring your materials.

Keywords to mirror

goaici/cdapimlllm

Platform: successfactors-unify
Effort: medium

Benefits

Benefits detected in the listing.

401(K)

Parental Leave