Application Security Engineer: Vulnerability Automation Lead

Cerebras Systems; Sunnyvale (CA); In loco; USD 180.000 - 280.000; Tempo pieno

Descrizione del lavoro

Cerebras Systems in Sunnyvale, CA seeks an Application Security Engineer focused on Vulnerability Management to secure our software, infra, and AI platforms. You will own the vulnerability program from discovery through remediation and verification, working closely with engineering to automate security work and reduce recurring issues.

This role requires building scalable security processes, integrating SAST/DAST/SCA tools into CI/CD, and driving risk-based prioritization across products and

Competenze

• Strong application security fundamentals and hands-on vulnerability management.
• Understand vulnerability classes and exploitation techniques across web apps, APIs, auth systems, cloud services, containers, and software supply chains.
• Can read and reason about code and work with engineers on remediation.
• Experience with vulnerability scanning and app security technologies such as SAST, SCA, DAST, secrets scanning, container scanning, or CSPM.
• Understand vulnerability prioritization concepts including CVSS, exploitability, asset criticality, internet exposure, compensating controls, and threat intelligence.
• Comfortable investigating security findings manually rather than relying solely on scanners.
• Can automate security workflows using languages like Python or Go.
• Experience integrating security tooling into CI/CD and modern development workflows.
• Comfortable working with Linux, Git, containers, and cloud environments.
• Able to communicate risk clearly to security and engineering teams.
• Approach security with an automation-first mindset.

Mansioni

• Own and continuously improve vulnerability management across apps, software dependencies, containers, OS, cloud infra, and exposed services.
• Use AI agents and advanced security models to augment discovery, code analysis, adversarial testing, prioritization, and remediation.
• Analyze vulnerabilities considering exploitability, exposure, assets, mitigations, and business impact.
• Partner with engineering to triage findings and drive remediation within risk-based SLAs.
• Build automation for vulnerability ingestion, deduplication, enrichment, prioritization, assignment, and reporting.
• Identify systemic patterns and address root causes rather than one-off fixes.
• Operate and improve capabilities including SAST, SCA, secrets detection, container/infrastructure scanning, and external attack-surface monitoring.
• Validate findings through hands-on testing, distinguishing exploitable vulnerabilities from false positives.
• Perform targeted reviews and testing for high-risk services and features.
• Integrate security controls into CI/CD while minimizing friction for developers.
• Develop metrics and reporting on vulnerability exposure and remediation performance.
• Evaluate and integrate new security technologies as environments evolve.
• Partner on incident response when vulnerabilities are exploited or require urgent remediation.

Conoscenze

Vulnerability management

Code analysis

Automation

CI/CD integration

Linux

Git

Cloud environments

Communication

Automation-first mindset

Formazione

Bachelor's degree in CS or related

Strumenti

SAST

SCA

DAST

Secrets scanning

Container scanning

CSPM

CI/CD tooling

Threat modeling

Descrizione del lavoro

Cerebras Systems in Sunnyvale, CA seeks an Application Security Engineer focused on Vulnerability Management to secure our software, infra, and AI platforms. You will own the vulnerability program from discovery through remediation and verification, working closely with engineering to automate security work and reduce recurring issues.

This role requires building scalable security processes, integrating SAST/DAST/SCA tools into CI/CD, and driving risk-based prioritization across products and