Application Security Engineer — Vulnerability Management Lead

Cerebras; United States; Remote; USD 130,000 - 210,000; Full time

Job summary

Cerebras Systems is seeking an Application Security Engineer focused on Vulnerability Management to secure Cerebras software, infrastructure, and AI platforms. You will own and evolve the vulnerability program, drive remediation with engineering teams, and automate repetitive security work to eliminate classes of vulnerabilities.

You will partner with Engineering, Infrastructure, and IT to triage findings, implement mitigations, and improve CI/CD security controls, balancing speed with risk

Responsibilities

• Own and continuously improve vulnerability management across applications, containers, OS, cloud infra and external services.
• Leverage AI and advanced security models to augment discovery, code analysis, testing, prioritization and remediation.
• Assess exploitability, exposure, assets affected, mitigations and business impact beyond scanners.
• Triage findings with engineering teams and drive remediation within risk-based SLAs.
• Build automation for ingestion, deduplication, enrichment, prioritization, assignment and reporting.
• Identify systemic patterns and address root causes rather than one-off fixes.
• Operate and improve SAST, SCA, secrets detection, container/infrastructure scanning and monitoring.
• Validate findings via hands-on testing and distinguish exploitable from false positives.
• Conduct targeted app security reviews and testing for high-risk services and features.
• Integrate security controls into CI/CD and developer workflows with minimal friction.

Skills

Vulnerability management

Automation

Security engineering

Tools

SAST

SCA

Secrets detection

Container scanning

Infrastructure scanning

External attack-surface monitoring

Job description

Cerebras Systems is seeking an Application Security Engineer focused on Vulnerability Management to secure Cerebras software, infrastructure, and AI platforms. You will own and evolve the vulnerability program, drive remediation with engineering teams, and automate repetitive security work to eliminate classes of vulnerabilities.

You will partner with Engineering, Infrastructure, and IT to triage findings, implement mitigations, and improve CI/CD security controls, balancing speed with risk