Application Security AI Engineer

Responsibilities & Qualifications

• Provide unified application security triage coverage across SCA, SAST, and DAST findings, including validation of critical and high-risk vulnerabilities
• Perform false positive analysis and exploitability assessment to prioritize remediation efforts
• Provide remediation guidance, escalation support, and handle PatchNow Critical events
• Assess and coordinate responses for threat intelligence escalations and monitor newly disclosed vulnerabilities
• Engineer, test, and implementAI-enabled security tooling, including support for evaluation of new AI capabilities and technical proof-of-value execution
• Strengthen software supply chain security through secure open-source dependency selection, SBOM and component visibility support, and detection of malicious packages
• Assess and improve developerIDE security, including securing plugins/extensions and developer workflows

Requirements

• 8-10 years of experience in application security
• Expertise incode scanning methodologies includingstatic scanning (SAST),dynamic scanning (DAST), andopen source scanning (SCA)
• Strong background inSCA/SAST/DAST triage, vulnerability management, andthreat intelligence
• Hands-on experience withAI-assisted security tooling andAI-enabled security tools, includingfrontier models andcoding assistants
• Working knowledge ofprompt and tool orchestration,model evaluation, andAI governance
• Proficiency withscripting and automation,APIs, andCI/CD workflows
• Experience withdeveloper tooling,security platform integrations,IDE security, andpackage managers
• Capability to detect and assessmalicious code in open-source dependencies
• Understanding ofsoftware supply chain security best practices