Назад
обновлено 19 дней назад

Application Security Engineer (AI)

100 000 - 258 000$
Формат работы
onsite
Тип работы
fulltime
Грейд
middle
Английский
b2
Страна
US
Вакансия из списка Hirify.GlobalВакансия из Hirify Global, списка международных tech-компаний
Для мэтча и отклика нужен Plus

Мэтч & Сопровод

Для мэтча с этой вакансией нужен Plus

Описание вакансии

Текст:
/
TL;DR
Application Security Engineer (AI): Ensuring the security and integrity of cloud-native applications and systems throughout the software development lifecycle with an accent on code security, CI/CD pipelines, and emerging AI technologies. Focus on conducting in-depth code reviews, designing secure coding guidelines, and managing vulnerability tracking.

Location: Palo Alto, CA, United States

Salary: $100,000–$258,000 USD base salary per year

Company

xAI develops AI systems designed to understand the universe and support humanity's pursuit of knowledge.

What you will do

  • Conduct code reviews, static analysis, and security testing to identify and mitigate application vulnerabilities.
  • Develop secure coding guidelines and integrate security practices into CI/CD pipelines and DevSecOps workflows.
  • Perform threat modeling and risk assessments, define mitigation strategies, and support application security incident response.
  • Manage vulnerability tracking and remediation while advising development teams on security improvements.
  • Secure software supply chains, including the production and maintenance of Software Bills of Materials.
  • Assess security risks in AI and machine learning models, including risks covered by the OWASP LLM Top 10.

Requirements

  • Bachelor's degree in Computer Science, Cybersecurity, or a related field.
  • 3–5 years of application security experience with a strong focus on code security.
  • Strong knowledge of secure coding, application security frameworks, OWASP Top 10, threat modeling, and vulnerability management.
  • Proficiency in Python or Rust and experience securing CI/CD pipelines and implementing DevSecOps practices.
  • Experience with software supply chain security, SBOM generation, Burp Suite or OWASP ZAP, and static or dynamic code analysis.
  • Understanding of AI/ML security implications and the ability to communicate complex security issues to technical and non-technical audiences.

Nice to have

  • Experience with GCP, AWS, Azure, GitOps, infrastructure-as-code security, or custom security tooling.
  • Security certifications such as CSSLP or OSWE.
  • Background in data privacy, compliance, federated learning, or privacy-preserving machine learning.
  • Experience securing AI/ML models and data pipelines or contributing to open-source security projects.

Culture & Benefits

  • Small, highly motivated organization with a flat structure and a focus on engineering excellence.
  • Hands-on environment emphasizing initiative, strong prioritization, communication, and direct contribution.
  • Equity and comprehensive medical, vision, and dental coverage.
  • 401(k) retirement plan, short- and long-term disability insurance, life insurance, discounts, and other benefits.

Будьте осторожны: если работодатель просит войти в их систему, используя iCloud/Google, прислать код/пароль, запустить код/ПО, не делайте этого - это мошенники. Обязательно жмите "Пожаловаться" или пишите в поддержку. Подробнее в гайде →