Application Security Engineer AI/ML & SAST

Compunnel, Inc.; Charlotte (NC); On-site; USD 120,000 - 150,000; Full time

Job summary

A technology services company is looking for an Application Security Engineer with expertise in AI/ML to enhance SAST capabilities. The role involves developing SAST strategies, automating workflows for CI/CD processes, and supporting secure development practices. Required qualifications include over 4 years in application security, hands-on experience with AI/ML frameworks, and understanding of OWASP vulnerabilities. This position promotes flexibility through collaboration and ensures effective communication across various teams. The job location is in Charlotte, North Carolina, with a contract type.

Qualifications

• 4+ years of application security experience.
• 3+ years of hands-on AI/ML development experience using frameworks such as TensorFlow or PyTorch.
• 2+ years of experience with generative AI models and reinforcement learning.

Responsibilities

• Develop and implement SAST strategies for AI/ML codebases.
• Automate SAST testing workflows in CI/CD pipelines.
• Collaborate with development and security teams on secure practices.

Skills

Application security experience

AI/ML development

Understanding of OWASP vulnerabilities

Customer service skills

Scripting (Python preferred)

Tools

TensorFlow

PyTorch

Atlassian tools

Job description

Application Security Engineer AI/ML & SAST

North Carolina, Charlotte

02/02/2026

Contract

Active

Job Description:

Job Summary

We are seeking an Application Security Engineer (AI/ML & SAST) to support and enhance integrations between Checkmarx and Corgea for automated code remediation.

This role focuses on advancing Static Application Security Testing (SAST) capabilities using AI and Machine Learning, improving shift-left practices, and enabling secure development workflows.

The engineer will drive technical enhancements, integrate AI-driven features, and collaborate closely with development, security, and product teams.

Key Responsibilities

• Develop and implement SAST strategies tailored for AI/ML codebases, including customization of SAST tools for LLM and AI/ML framework compatibility.
• Automate SAST testing workflows and integrate them into CI/CD pipelines.
• Provide hands-on technical support for Checkmarx and the Checkmarx ONE platform.
• Support and enhance integration efforts between Checkmarx and Corgea for autocode remediation.
• Drive vendor accountability to address product defects and improve platform reliability.
• Support patching activities and perform upgrade testing for SAST and AI/ML-enhanced tooling.
• Collaborate with Product Owners, Application Security Champions, developers, and offshore teams to support secure development practices.
• Ensure documentation is accurate, up to date, and reflective of process or tooling changes.
• Troubleshoot technical issues related to AI-assisted remediation, security scanning, and pipeline integrations.

Required Qualifications

• 4+ years of application security experience.
• 3+ years of hands-on AI/ML development experience using frameworks such as TensorFlow or PyTorch.
• 2+ years of experience with generative AI models, reinforcement learning, or autocode remediation models.
• 2+ years of experience working in Agile environments and with Atlassian tools (Jira, Confluence, or equivalent).
• Strong understanding of OWASP Top 10 vulnerabilities.
• Excellent customer service skills and the ability to collaborate across multiple teams.

Preferred Qualifications

• 2+ years of cloud experience.
• 3+ years of scripting experience (Python preferred).
• 2+ years of SQL experience.
• 1+ year of experience using Corgea AI (preferred).