Application Security Engineer
xAI· Information Security
Palo Alto, CA$100k - $258kPosted 11mo ago
About the role
Role focused on securing cloud-native applications and CI/CD pipelines, with emphasis on code security, threat modeling, SBOMs, and AI/ML security considerations within a software development lifecycle.
Responsibilities
- Conduct in-depth code reviews and static analysis to identify and mitigate security vulnerabilities in our applications
- Design and implement secure coding guidelines and best practices for development teams
- Collaborate closely with development teams to integrate security practices throughout the CI/CD pipeline
- Perform threat modeling and risk assessments for applications, developing mitigation strategies for potential risks
- Manage vulnerability tracking and remediation efforts, providing guidance to development teams
- Support incident response activities related to application security
- Stay current on emerging security threats and trends in cloud-native technologies and AI, continuously enhancing our security measures
- Evaluate and secure software supply chains, including producing and maintaining Software Bills of Materials (SBOMs)
- Address security concerns specific to AI and machine learning models, with a focus on the OWASP LLM Top 10
Qualifications
- Bachelor's degree in Computer Science, Cybersecurity, or a related field
- 3-5 years of experience in application security, with a strong focus on code security practices
- Deep understanding of secure coding practices, application security frameworks, and common vulnerabilities (e.g., OWASP Top 10)
- Proficiency in Python or Rust programming languages and experience with secure coding practices in these languages
- Experience securing CI/CD pipelines and implementing DevSecOps practices
- Familiarity with software supply chain security and SBOM generation tools
- Experience with security testing tools (e.g., Burp Suite, OWASP ZAP) and static/dynamic code analysis
- Understanding of AI/ML security implications, particularly those outlined in the OWASP LLM Top 10
- Excellent communication skills, able to explain complex security issues to both technical and non-technical audiences
Skills
Required:code security practicesstatic analysisCI/CD securitythreat modelingSBOMAI/ML securitysecurity toolingDevSecOps
Nice to have:cloud securitysecurity certifications
Benefits
- equity
- comprehensive medical, vision, and dental coverage
- access to a 401(k) retirement plan
- short & long-term disability insurance
- life insurance
- various other discounts and perks
Last updated Oct 14, 2026. Interested? Apply on the company site.
More open roles at xAI
- Supervisor, Child Safety Operations5d agoAustin, TX · Safety
- Security Engineer, Kubernetes5d agoHybrid (Palo Alto, CA; Austin, TX; New York, NY; Washington, DC) · Information Security
- Security Engineer - GRC Sales5d agoInformation Security
- Site Reliability Engineer5d agoHybrid (Memphis/Southaven) · Data Center
- Senior Linux Data Center Technician - Memphis5d agoHybrid (Memphis, TN) · Data Center