AppSec Engineer — Shift-Left Security for AI‑Driven Apps

Teradata; California (MO); Hybrid; USD 120,000 - 190,000; Full time

Job summary

Teradata is seeking a seasoned Application Security Engineer to join our security team. You will collaborate with Product Engineering to embed secure practices across the Secure SDLC, lead automated scanning initiatives, and guide developers on vulnerability remediation across multiple languages.

You will review supply chain risks, develop Go automation scripts, and evaluate AI-generated code for risk. A strong background in OWASP AI security standards and incident prevention is required.

Qualifications

• Knowledge of core application security principles and vulnerability classes.
• Experience evaluating internal software and third-party products against security requirements.
• Ability to translate security findings into plain-language summaries for non-security audiences.
• Experience with OWASP ASVS and related AI security standards.

Responsibilities

• Analyze and triage findings from SAST, SCA, DAST, IaC, and container scans to identify true positives.
• Deliver actionable remediation guidance to development teams for AppSec findings.
• Review code and reason about vulnerabilities in Java, C/C++, Go, Python, and JavaScript/TypeScript.
• Integrate AppSec scanning into CI/CD pipelines to shift security left.
• Review cloud configurations and data flow for security misconfigurations.
• Communicate risk and security posture to technical and non-technical stakeholders.

Skills

Java

C/C++

Go

Python

JavaScript/TypeScript

Education

MS/BS in CS/EE/IT

Advanced degree preferred

Tools

SAST

SCA

DAST

IaC

Container Scanning

CI/CD

Job description

Teradata is seeking a seasoned Application Security Engineer to join our security team. You will collaborate with Product Engineering to embed secure practices across the Secure SDLC, lead automated scanning initiatives, and guide developers on vulnerability remediation across multiple languages.

You will review supply chain risks, develop Go automation scripts, and evaluate AI-generated code for risk. A strong background in OWASP AI security standards and incident prevention is required.