Application Security Engineer (X Money)
xAI· Information Technology
Hybrid (Palo Alto, CA; Austin, TX; New York, NY; Washington, DC)$100k - $258kPosted 2w ago
About the role
Application Security Engineer focusing on protecting payments and financial products across the software development lifecycle, with emphasis on code security, CI/CD pipelines, and systems handling customer funds.
Responsibilities
- Conduct in-depth code reviews and static analysis to identify and mitigate security vulnerabilities in financial applications
- Design and implement secure coding guidelines and best practices for development teams
- Collaborate closely with development teams to integrate security practices throughout the CI/CD pipeline
- Perform threat modeling and risk assessments for payments, wallets, ledgers, and related product surfaces, and develop mitigation strategies for fraud, abuse, and unauthorized movement of funds or credits
- Manage vulnerability tracking and remediation efforts, providing guidance to development teams
- Manage the bug bounty program, including intake, triage, researcher communication, and coordinated disclosure
- Support incident response activities related to application security
- Stay current on emerging threats against financial and cloud-native systems, and continuously strengthen our controls
- Evaluate and secure software supply chains, including producing and maintaining Software Bills of Materials (SBOMs)
- Design and implement agentic and LLM-based solutions that help detect, investigate, or prevent security problems
Qualifications
- Bachelor’s degree in Computer Science, Cybersecurity, or a related field
- 3-5 years of experience in application security, with a strong focus on code security practices
- Experience in payments, money transmission, digital wallets, or related financial platforms
- Deep understanding of secure coding practices, application security frameworks, and common vulnerabilities (e.g., OWASP Top 10)
- Proficiency in Python or Rust and experience with secure coding practices in these languages
- Experience securing CI/CD pipelines and implementing DevSecOps practices
- Familiarity with software supply chain security and SBOM generation tools
- Experience with security testing tools (e.g., Burp Suite, OWASP ZAP) and static/dynamic code analysis
- Experience securing payments, wallets, ledgers, or other high-value transaction systems, including controls against fraud, abuse, and integrity issues
- Experience designing and implementing agentic and LLM-based solutions for security problems
- Excellent communication skills, able to explain complex security issues to both technical and non-technical audiences
Skills
Required:Code security practicesStatic analysisCI/CD security / DevSecOpsThreat modeling & risk assessmentSBOM & supply chain securityAgentic & LLM-based security solutionsSecurity testing toolsPython or RustCommunication
Benefits
- equity
- comprehensive medical, vision, and dental coverage
- 401(k) retirement plan
- short & long-term disability insurance
- life insurance
- various other discounts and perks
Last updated Oct 14, 2026. Interested? Apply on the company site.
More open roles at xAI
- Supervisor, Child Safety Operations6d agoAustin, TX · Safety
- Security Engineer, Kubernetes6d agoHybrid (Palo Alto, CA; Austin, TX; New York, NY; Washington, DC) · Information Security
- Security Engineer - GRC Sales6d agoInformation Security
- Site Reliability Engineer6d agoHybrid (Memphis/Southaven) · Data Center
- Senior Linux Data Center Technician - Memphis6d agoHybrid (Memphis, TN) · Data Center