AI AppSec Engineer: Secure SDLC with Autonomous Guardrails

Fullpath; United States; On-site; USD 120,000 - 160,000; Full time

Job summary

Fullpath by Cox Automotive is seeking an AI AppSec Engineer to drive our secure software development lifecycle and build autonomous security guardrails for AI-powered workflows. You will work under the AppSec Architect to secure LLM-based processes and prevent vulnerabilities from entering production.

The role emphasizes threat modeling, security tooling, and collaboration with R&D and DevOps to integrate security early in the software lifecycle.

Qualifications

• 2-4 years experience as an Application Security Engineer or similar role from a Software Development Company.
• In-depth knowledge in threat modeling, risk management, and security controls.
• Experience with AI Security and Security AI.
• Proficiency with OWASP Top 10: API, LLM, and Agentic applications.
• Hands-on competency integrating security tools such as SAST, DAST, SCA, and API security testing.
• Familiarity with CI/CD pipelines and Infrastructure as Code implementation.
• Practical background in software development and coding.
• In-depth knowledge of cloud technologies and cloud-native applications, AWS and GCP.
• Cybersecurity certifications such as OSCP, GPEN, CSSLP.

Responsibilities

• Build & automate: Develop and maintain internal security tooling, automated workflows, and AI security agents.
• Code integrity: Execute secure code reviews and provide actionable remediation guidance to engineering teams.
• Vulnerability management: Lead the tracking, triaging, and reporting of security flaws across all product lines.
• Best practice advocacy: Drive the adoption of secure coding standards, partnering with R&D and DevOps teams to embed security early and often.
• Extend our D&R capabilities: Build scalable solutions to identify malicious activity, triage alerts, and investigate and remediate incidents.
• Document: Draft requirement documents for security products and innovative technologies.

Skills

Threat modeling

Risk management

Security controls

AI Security

Security AI

OWASP Top 10

SAST

DAST

SCA

API security testing

CI/CD

Infrastructure as Code

Software development

Cloud technologies

AWS

GCP

Certifications (OSCP)

Certifications (GPEN)

Certifications (CSSLP)

Tools

SAST tooling

DAST tooling

SCA tooling

API security testing tooling

Job description

Fullpath by Cox Automotive is seeking an AI AppSec Engineer to drive our secure software development lifecycle and build autonomous security guardrails for AI-powered workflows. You will work under the AppSec Architect to secure LLM-based processes and prevent vulnerabilities from entering production.

The role emphasizes threat modeling, security tooling, and collaboration with R&D and DevOps to integrate security early in the software lifecycle.