Cybersecurity Application Security Engineer (AI)
Мэтч & Сопровод
Для мэтча с этой вакансией нужен Plus
Описание вакансии
TL;DR
Cybersecurity Application Security Engineer (AI): Performing manual source code reviews and implementing SAST/DAST scanning to secure the SDLC with an accent on AI/LLM-integrated features and threat modeling. Focus on integrating security tooling into CI/CD pipelines and identifying vulnerabilities such as prompt injection and model-data leakage.
Location: Remote or Hybrid (US). Must be a US Citizen to obtain required government security clearance; no visa sponsorship provided.
Salary: $90,000–$125,000 annually
Company
A diversified corporation specializing in student loan servicing, payment processing, and education services.
What you will do
- Conduct manual source code reviews and execute SAST/DAST scanning.
- Develop automated source code review processes and integrate security checks into CI/CD pipelines.
- Expand the Security Champions program and guide product teams through secure SDLC processes.
- Perform threat modeling using STRIDE and attack trees for traditional and AI-integrated systems.
- Analyze AI/LLM attack surfaces, including prompt injection and RAG vulnerabilities.
- Provide detailed vulnerability reports and communicate risks to management and engineering staff.
Requirements
- 2–4 years of hands-on application security experience.
- US Citizenship is mandatory for US Government security clearance.
- Proficiency in at least one major language (Java, JavaScript/TypeScript, C#, or PHP) for manual code review.
- Strong knowledge of OWASP Top 10, web/API security, and container scanning.
- Experience with scripting in Python, Bash, or Node for security automation.
- Authorized to work in the US without current or future sponsorship.
Nice to have
- Previous experience with AI/LLM model security or prompt safety.
- Expertise in mobile security and reverse engineering.
- Certifications such as OSWE, OSCP, GWAPT, GCSA, GCPN, or ML security certifications.
- Experience mentoring junior developers in secure design practices.
Culture & Benefits
- Comprehensive health package including medical, dental, vision, HSA, and FSA.
- Financial perks: 401K, student loan repayment, and employee stock purchase program.
- Generous earned time off and tuition reimbursement.
- Performance-based incentive pay and a robust wellness program.
- Hybrid work flexibility for those living within 30 miles of an office.
Будьте осторожны: если работодатель просит войти в их систему, используя iCloud/Google, прислать код/пароль, запустить код/ПО, не делайте этого - это мошенники. Обязательно жмите "Пожаловаться" или пишите в поддержку. Подробнее в гайде →