Application Security AI Engineer
Core
Provide unified application security triage across SCA, SAST, and DAST findings and engineer AI-enabled security tools to advance vulnerability management and software supply chain security programs.
Role type
Senior IC application security engineer (AI/ML)
Builds
AI-assisted security tooling, secure open-source dependency selection, SBOM and component visibility support, malicious package detection
Domain
Cybersecurity, Application Security, Software Supply Chain
Deliverable
production ML models
Required skills
SAST, DAST, SCA, vulnerability management, threat intelligence, AI-assisted security tooling, prompt orchestration, model evaluation, AI governance, scripting, automation, CI/CD workflows, developer tooling, IDE security, package managers, software supply chain security
Preferred skills
frontier models, coding assistants, technical proof-of-value exercises
Technologies
SAST, DAST, SCA, AI CI/CD Support, Security
Responsibilities
Provide unified application security triage across SCA, SAST, and DAST findings, including validation of critical and high-risk vulnerabilities; Analyze false positives and assess exploitability to help prioritize remediation; Engineer, test, and implement AI-enabled security tools, including evaluating new AI capabilities and conducting technical proof-of-value exercises; Assess and enhance developer IDE security, including securing plugins, extensions, and developer workflows
