Application Security Engineer - DevSecOps & Red Team

Jobright.ai; San Francisco (CA); On-site; USD 140,000 - 200,000; Full time

Job summary

Writer Corporation seeks an Application Security Engineer to secure its AI and AGI applications by embedding security into development pipelines, performing pen tests, and collaborating with cross-functional teams to safeguard AI solutions.

The role emphasizes automation of security testing, secure deployment practices, and threat modeling across cloud-native architectures, while enabling proactive remediation and architecture reviews.

Qualifications

• 8+ years in application security with hands-on testing.
• 5+ years conducting penetration tests and security assessments.
• Proven record of finding and exploiting critical vulnerabilities.
• Deep experience integrating security into DevOps workflows and CI/CD pipelines.
• Strong programming skills for exploit development and security automation.
• Expertise in web application and API security, including cloud-native architectures.
• Proficient with penetration testing tools (e.g., Burp Suite, OWASP ZAP, custom scripts).
• Skilled in SAST, DAST, and SCA tools.
• Strong understanding of application-layer attack techniques and exploitation.
• Experience with supply chain security and build pipeline hardening.
• Demonstrated ability to translate red team findings into concrete defensive measures.

Responsibilities

• Embed security in the build pipeline — Own pre-deployment application security, including automated vulnerability scanning, container scanning, and custom security gates in CI/CD
• Conduct advanced application penetration testing — Perform comprehensive testing on AI applications, APIs, and model endpoints, simulating adversarial attacks to validate controls
• Automate security testing at scale — Develop scripts, tools, and frameworks for continuous security assessment, including SAST, DAST, and SCA integration
• Lead application-layer red team exercises — Plan and execute engagements that mimic sophisticated adversary techniques targeting AI systems
• Hunt and validate vulnerabilities — Discover, reproduce, and chain vulnerabilities into realistic attack paths, providing actionable remediation guidance
• Advise on security architecture — Review designs for weaknesses, create secure patterns, and identify systemic issues across applications
• Collaborate across boundaries — Partner with Cloud/Infrastructure on deployment/runtime security, AI Security on threat modeling, and Detection & Response on defensive validation

Skills

AppSec expertise

Penetration testing

DevSecOps automation

CI/CD integration

Vulnerability discovery

SAST tools

DAST tools

API security

Exploit development

Security architecture

Purple team operations

Collaboration

Tools

Burp Suite

OWASP ZAP

custom scripts

Job description

Writer Corporation seeks an Application Security Engineer to secure its AI and AGI applications by embedding security into development pipelines, performing pen tests, and collaborating with cross-functional teams to safeguard AI solutions.

The role emphasizes automation of security testing, secure deployment practices, and threat modeling across cloud-native architectures, while enabling proactive remediation and architecture reviews.