Our client is seeking an Application Security AI Engineer to provide unified application security triage and drive AI-enabled security tooling initiatives across their vulnerability management and software supply chain security programs.
Responsibilities & Qualifications
Provide unified application security triage coverage across SCA, SAST, and DAST findings, including validation of critical and high-risk vulnerabilities
Perform false positive analysis and exploitability assessment to prioritize remediation efforts
Provide remediation guidance, escalation support, and handle PatchNow Critical events
Assess and coordinate responses for threat intelligence escalations and monitor newly disclosed vulnerabilities
Engineer, test, and implement AI-enabled security tooling, including support for evaluation of new AI capabilities and technical proof-of-value execution
Strengthen software supply chain security through secure open-source dependency selection, SBOM and component visibility support, and detection of malicious packages
Assess and improve developer IDE security, including securing plugins/extensions and developer workflows
Requirements
8-10 years of experience in application security
Expertise in code scanning methodologies including static scanning (SAST), dynamic scanning (DAST), and open source scanning (SCA)
Strong background in SCA/SAST/DAST triage, vulnerability management, and threat intelligence
Hands-on experience with AI-assisted security tooling and AI-enabled security tools, including frontier models and coding assistants
Working knowledge of prompt and tool orchestration, model evaluation, and AI governance
Proficiency with scripting and automation, APIs, and CI/CD workflows
Experience with developer tooling, security platform integrations, IDE security, and package managers
Capability to detect and assess malicious code in open-source dependencies
Understanding of software supply chain security best practices