AI-Native Application Security Engineer

Mercor; New York, San Francisco (NY, CA); On-site; USD 120,000 - 160,000; Full time

Job summary

A leading AI development company in New York seeks an experienced Application Security Engineer. You will own the application security domain, embedding security in the development lifecycle, integrating tools into CI/CD, and managing vulnerabilities. The ideal candidate has over 5 years of experience in application security, a deep understanding of web security, and the ability to build and tune security tooling. Embrace AI tools daily while contributing to high-visibility solutions within a dynamic team environment.

Qualifications

• 5+ years of professional experience in application security or related field.
• Found and fixed real vulnerabilities in production applications.
• Strong understanding of web application security and OWASP Top 10.

Responsibilities

• Embed security review workflows in the SDLC.
• Integrate SAST/DAST pipelines into CI/CD processes.
• Manage the vulnerability pipeline from discovery to remediation.

Skills

Web application security

Python

TypeScript

Go

SAST/DAST tooling

Threat modeling

Vulnerability management

Tools

Semgrep

CodeQL

Snyk

Burp

Job description

A leading AI development company in New York seeks an experienced Application Security Engineer. You will own the application security domain, embedding security in the development lifecycle, integrating tools into CI/CD, and managing vulnerabilities. The ideal candidate has over 5 years of experience in application security, a deep understanding of web security, and the ability to build and tune security tooling. Embrace AI tools daily while contributing to high-visibility solutions within a dynamic team environment.