Application Security Engineer - SDLC & AI Security

Jobtailor; San Francisco (CA); On-site; USD 140,000 - 180,000; Full time

Job summary

Jobtailor is seeking an experienced security engineer to guide developers in secure coding and threat modeling. You will collaborate with software teams to embed security into the lifecycle, perform code reviews, and manage vulnerability remediation using SAST/DAST/SCA and AI tooling.

The role requires deep knowledge of C++ and Python, familiarity with CI/CD pipelines, and experience communicating risk to technical and non-technical stakeholders. Strong training and mentoring skills are valued.

Qualifications

• 5+ years of total experience with at least 1 year in Application Security or security tasks in a development role.

Responsibilities

• Partner with the engineering team to provide hands-on technical guidance through the vulnerability remediation lifecycle.
• Drive vulnerability identification using SAST, DAST, SCA and in-house AI tooling and manage external pentesting.
• Support engineering on vulnerability management, including risk assessment and translating security requirements into technical specs.
• Build security awareness through training on secure coding practices and security standards.

Skills

Security Communication

Coaching

Risk Reasoning

Stakeholder Engagement

Training

Education

BS in Computer Science

Relevant Certifications

Tools

C++

Python

SAST

DAST

SCA

Github Copilot

CI/CD Pipelines

In-House AI Tooling

Job description

Jobtailor is seeking an experienced security engineer to guide developers in secure coding and threat modeling. You will collaborate with software teams to embed security into the lifecycle, perform code reviews, and manage vulnerability remediation using SAST/DAST/SCA and AI tooling.

The role requires deep knowledge of C++ and Python, familiarity with CI/CD pipelines, and experience communicating risk to technical and non-technical stakeholders. Strong training and mentoring skills are valued.