7 дней назад
Senior Application Security Engineer (AI/ML)
232 000 - 379 000$
Мэтч & Сопровод
Для мэтча с этой вакансией нужен Plus
Описание вакансии
Текст:
TL;DR
Senior Application Security Engineer (AI/ML): Building security into web, backend, and API development lifecycles with an accent on AI/ML security, threat modeling, and automated security tooling. Focus on integrating SAST, SCA, and DAST into CI/CD, reviewing complex codebases, remediating vulnerabilities, and strengthening secure development practices.
Location: Remote within the U.S., excluding U.S. territories. Core meeting hours are 9AM–2PM Pacific time. Occasional travel may be requested but is not required.
Salary: $232,000–$379,000 per year.
Company
is an insurance technology innovation company backed and wholly owned by State Farm, developing risk prediction, prevention, acquisition, and digital insurance platform solutions.
What you will do
- Partner with web and backend engineering teams to manage product security across the software development lifecycle.
- Lead security design reviews and threat modeling for APIs, web features, and service integrations.
- Integrate SAST, SCA, and DAST tooling into CI/CD pipelines and developer workflows.
- Review source code and deployment configurations, then coordinate vulnerability triage, remediation, and validation.
- Develop AppSec automation and integrations, including ASVS scanning and Burp Suite Enterprise, using AI/ML where appropriate.
- Support SaaS security assessments, open-source reviews, secure development enablement, and incident response planning.
Requirements
- Bachelor’s degree or equivalent relevant experience.
- 6–8 years of experience in application security or full-stack development with security expertise.
- Strong secure coding knowledge in Python, JavaScript/TypeScript, Node.js, and web standards.
- Understanding of OWASP Top 10, GenAI/LLM risks, API security, SSRF, and related application vulnerabilities.
- Experience with CodeQL, Wiz, SonarQube, Snyk, or comparable code-scanning tools.
- Ability to read and debug complex codebases and communicate security guidance to engineers at all levels.
Nice to have
- GraphQL security experience.
- Participation in security champions programs or secure SDLC rollouts.
- Contributions to open-source security tooling.
- Infrastructure-as-code, container security, or AI/ML automation experience.
Culture & Benefits
- Remote-first work environment for most positions, with optional access to offices in the San Francisco Bay Area and Providence, Rhode Island.
- Medical, dental, vision, life insurance, supplemental income plans, and a 401(k) with company match.
- $2,000 one-time allowance for home office equipment and a provisioned MacBook Pro.
- Four weeks of PTO in the first year and twelve weeks of fully paid parental leave.
- Up to $5,000 annually for professional development, plus LinkedIn Learning and coaching access.
Будьте осторожны: если работодатель просит войти в их систему, используя iCloud/Google, прислать код/пароль, запустить код/ПО, не делайте этого - это мошенники. Обязательно жмите "Пожаловаться" или пишите в поддержку. Подробнее в гайде →
Похожие вакансии
9 дней назад
Senior Engineer, AI Product Security
153 000 - 166 000$
Asana
7 дней назад
Product Security Engineer (AI)
176 000 - 200 000CAD
14 дней назад
Product Security Engineer (AI)
231 900 - 318 250$
14 дней назад
Senior Application Security Engineer (Application Security)
172 000 - 200 000$
10 дней назад
Principal Security Engineer (AI)
256 000 - 320 000$
3 дня назад
Product Security Engineer (Fintech)
175 000 - 220 000$