Application Security Engineer I
Core
Hands-on Application Security Engineer supporting threat modeling, vulnerability remediation, and secure SDLC practices for CarGurus applications and cloud infrastructure.
Role type
Junior Application Security Engineer (IC)
Builds
Secure cloud-first infrastructure (AWS, Kubernetes) and application security guardrails
Domain
Automotive marketplace, Cloud Security, Application Security
Deliverable
production ML models | product features | dashboards & analysis | research | client delivery | infrastructure | physical/clinical work
Required skills
Vulnerability management, Threat modeling, Secure coding, SDLC integration, Cloud infrastructure (AWS, Kubernetes), Scripting (Python, Go, Java), CI/CD automation
Preferred skills
AI/ML for security, Internship or project experience in security/software development
Technologies
AWS, Kubernetes, GitHub, CI/CD tools, Python, Go, Java
Responsibilities
Support threat modeling and security risk assessments, Assist in training developers on secure coding and AI-assisted development, Help triage and track vulnerability remediation, Contribute to code and infrastructure scanning tools, Assist in application security investigations, Partner with teams to design security controls for cloud infrastructure
Seniority
Junior, early-career IC
