Associate Application Security Engineer — Cloud & SDLC

CarGurus; Boston (MA); Hybrid; USD 96,000 - 120,000; Full time

Benefits offered by this job

Daily free lunch

New car discount

Equity for all

Flexible hybrid model

Job summary

CarGurus seeks an Application Security Engineer I to join the Security Engineering and Architecture team. You will work hands-on to secure applications, products, and infrastructure, partnering with engineers and senior security staff to review services for security best practices and support vulnerability remediation.

This entry-level role is ideal for someone early in their security career who wants practical skills, collaborative growth, and exposure to AWS, Kubernetes, and modern security

Qualifications

• 0–2 years in cybersecurity or app security or related field.
• Internship, co-op, or project work in security or software dev is a plus.
• Interest in AI/ML to improve security outcomes.
• Familiar with secure coding, vulnerability management, threat modeling, or risk assessment.
• Familiar with AWS, Kubernetes, containers, or IaC.
• Familiar with SDLC processes and GitHub/CI/CD tools.
• Proficient in at least one language (Python/Go/Java).
• Strong desire to learn continuously in cybersecurity.

Responsibilities

• Support threat modeling and security risk assessments for CarGurus apps and products.
• Assist in training developers on secure coding, AI-assisted development, and secure SDLC.
• Help triage, prioritize, and track remediation of vulnerabilities.
• Contribute to scanning tools and policies to enforce security guardrails.
• Assist investigations involving application security issues.
• Collaborate with teams to design and implement security controls for a cloud-first environment.

Skills

Security basics

Threat modeling

Vulnerability management

Cloud infrastructure

Python/Go/Java

CI/CD tooling

AI/ML in security

Security concepts

Secure coding

Tools

GitHub

CI/CD automation

Job description

CarGurus seeks an Application Security Engineer I to join the Security Engineering and Architecture team. You will work hands-on to secure applications, products, and infrastructure, partnering with engineers and senior security staff to review services for security best practices and support vulnerability remediation.

This entry-level role is ideal for someone early in their security career who wants practical skills, collaborative growth, and exposure to AWS, Kubernetes, and modern security