Application Security Engineer

The role

You will own and evolve the vulnerability management program to secure software, infrastructure, and AI platforms. You will work with engineering, infrastructure, and IT teams to identify, prioritize, and remediate vulnerabilities.

What you will do

• Improve vulnerability management across applications, software dependencies, containers, operating systems, cloud infrastructure, and exposed services.
• Use AI agents and security models to augment discovery, analysis, testing, and remediation.
• Analyze vulnerabilities by considering exploitability, exposure, assets, mitigations, and business impact.
• Partner with engineering teams to triage findings and drive remediation within SLAs.
• Build automation for vulnerability ingestion, deduplication, enrichment, and reporting.
• Identify systemic vulnerability patterns to address root causes.
• Operate application security capabilities including SAST, SCA, secrets detection, and container scanning.
• Validate security findings through technical investigation and hands-on testing.
• Perform targeted application security reviews for high-risk services.
• Integrate security controls into CI/CD and developer workflows.

Required qualifications

• Strong application security or product security fundamentals.
• Hands-on experience with vulnerability management.
• Understand common vulnerability classes and exploitation techniques across web applications, APIs, authentication systems, cloud services, containers, and software supply chains.
• Can read and reason about code.
• Experience with vulnerability scanning and application security technologies such as SAST, SCA, DAST, secrets scanning, container scanning, or CSPM.
• Understand vulnerability prioritization concepts including CVSS, exploitability, asset criticality, internet exposure, compensating controls, and threat intelligence.
• Comfortable investigating security findings manually.
• Can automate security workflows using Python, Go, or similar scripting/programming languages.
• Experience integrating security tooling into CI/CD and modern software development workflows.
• Comfortable working with Linux, Git, containers, and cloud environments.
• Can communicate security risk clearly to security specialists and engineering teams.
• Approach security with an automation-first mindset.

Nice to have

• Application Security or Security engineering background.
• Securing AI/ML platforms, inference services, or large-scale compute infrastructure.
• Building or operating vulnerability management programs at scale.
• AWS, Kubernetes, Docker, and cloud-native environments.
• Software supply-chain security and dependency management.
• GitHub and CI/CD security.
• Threat modeling and secure design reviews.
• Penetration testing or offensive security.
• External attack-surface management.
• Vulnerability research or exploit validation.

Benefits

• Build a breakthrough AI platform beyond the constraints of the GPU.
• Publish and open source cutting-edge AI research.
• Work on one of the fastest AI supercomputers in the world.
• Job stability with startup vitality.
• Simple, non-corporate work culture that respects individual beliefs.

About the company

Cerebras Systems builds the world's largest AI chip. The company works with leading model labs, global enterprises, and AI-native startups.