обновлено 5 дней назад
Application Security Engineer (AI)
85 000 - 105 000$
Вакансия из Hirify Global, списка международных tech-компанийДля мэтча и отклика нужен Plus
Мэтч & Сопровод
Для мэтча с этой вакансией нужен Plus
Описание вакансии
Текст:
TL;DR
Application Security Engineer (AI): Embedding security throughout the software development lifecycle by designing secure systems, reviewing code, identifying vulnerabilities, and integrating security tooling into CI/CD with an accent on OWASP vulnerability analysis, cloud security, authentication, authorization, and cryptography. Focus on reducing production risk, automating security improvements, and collaborating with engineering teams across offensive and defensive security challenges.
Location: 100% remote within the United States. Applicants must be U.S. citizens, Green Card holders, EAD holders, or eligible for an H-1B transfer.
Salary: $85,000–$105,000 annually.
Company
is a technology consulting and software development company delivering cloud, AI, data, and enterprise solutions across the United States.
What you will do
- Embed application security throughout the software development lifecycle.
- Partner with engineering teams to design secure systems and reduce application risk.
- Identify vulnerabilities through code review and offensive and defensive security practices.
- Integrate SAST, DAST, SCA, and other security controls into CI/CD pipelines.
- Improve authentication, authorization, cryptographic, cloud, and infrastructure security.
- Communicate security risks and recommendations to technical and non-technical audiences in an Agile environment.
Requirements
- Bachelor’s degree in Computer Science, Cybersecurity, or a related field.
- At least 5 years of application security or security engineering experience; the position lists 6+ years of experience.
- Strong knowledge of OWASP Top 10, common vulnerability classes, and modern exploit patterns.
- Hands-on code review experience across at least two major programming languages and proficiency in at least one programming language for tooling and automation.
- Deep familiarity with SAST, DAST, SCA, CI/CD-integrated security tooling, authentication, authorization, cryptographic primitives, cloud security, and modern infrastructure controls.
- U.S. work authorization is required; new H-1B visa petitions cannot be sponsored.
Nice to have
- OSCP, OSCE, GWAPT, CISSP, or similar industry certification.
- Offensive security tooling and red-team operations experience.
- Bug bounty experience, public CVEs, or open-source security contributions.
- AI/LLM application security experience.
- Experience with regulated industries and strict compliance requirements.
Culture & Benefits
- Full-time direct W-2 employment.
- Remote work within the United States.
- Career growth opportunities within an established consulting and software development organization.
- Collaboration with engineering teams to ship practical security improvements without slowing development.
Будьте осторожны: если работодатель просит войти в их систему, используя iCloud/Google, прислать код/пароль, запустить код/ПО, не делайте этого - это мошенники. Обязательно жмите "Пожаловаться" или пишите в поддержку. Подробнее в гайде →
Музыка
Осень
Поддержка