Роль четко определена с акцентом на безопасность приложений в AI, а диапазон зарплаты высокий, что отражает спрос на эти навыки. Однако требование к широкому набору навыков может указывать на большую нагрузку.
Кликните для подробной информации
Перегруженная рольВысокая зарплатаТрендовый доменПродуктовая компанияЧеткие обязанности
Оценка от Hirify AI
Мэтч & Сопровод
Для мэтча с этой вакансией нужен Plus
Подключить Plus
Описание вакансии
Текст:
Hirify AI/Оригинал
TL;DR
Application Security Engineer (AI): Ensuring the security and integrity of cloud-native applications and systems throughout the software development lifecycle with an accent on code security, CI/CD pipelines, and emerging AI technologies. Focus on conducting in-depth code reviews, designing secure coding guidelines, and managing vulnerability tracking.
Location: Palo Alto, CA, United States
Salary: $100,000–$258,000 USD base salary per year
Company
xAI develops AI systems designed to understand the universe and support humanity's pursuit of knowledge.
What you will do
Conduct code reviews, static analysis, and security testing to identify and mitigate application vulnerabilities.
Develop secure coding guidelines and integrate security practices into CI/CD pipelines and DevSecOps workflows.
Perform threat modeling and risk assessments, define mitigation strategies, and support application security incident response.
Manage vulnerability tracking and remediation while advising development teams on security improvements.
Secure software supply chains, including the production and maintenance of Software Bills of Materials.
Assess security risks in AI and machine learning models, including risks covered by the OWASP LLM Top 10.
Requirements
Bachelor's degree in Computer Science, Cybersecurity, or a related field.
3–5 years of application security experience with a strong focus on code security.
Strong knowledge of secure coding, application security frameworks, OWASP Top 10, threat modeling, and vulnerability management.
Proficiency in Python or Rust and experience securing CI/CD pipelines and implementing DevSecOps practices.
Experience with software supply chain security, SBOM generation, Burp Suite or OWASP ZAP, and static or dynamic code analysis.
Understanding of AI/ML security implications and the ability to communicate complex security issues to technical and non-technical audiences.
Nice to have
Experience with GCP, AWS, Azure, GitOps, infrastructure-as-code security, or custom security tooling.
Security certifications such as CSSLP or OSWE.
Background in data privacy, compliance, federated learning, or privacy-preserving machine learning.
Experience securing AI/ML models and data pipelines or contributing to open-source security projects.
Culture & Benefits
Small, highly motivated organization with a flat structure and a focus on engineering excellence.
Hands-on environment emphasizing initiative, strong prioritization, communication, and direct contribution.
Equity and comprehensive medical, vision, and dental coverage.
401(k) retirement plan, short- and long-term disability insurance, life insurance, discounts, and other benefits.
Будьте осторожны: если работодатель просит войти в их систему, используя iCloud/Google, прислать код/пароль, запустить код/ПО, не делайте этого - это мошенники. Обязательно жмите "Пожаловаться" или пишите в поддержку. Подробнее в гайде →