Automation-Driven App Security Engineer

Cerebras Systems; Sunnyvale (CA); On-site; USD 180,000 - 240,000; Full time

Job summary

Cerebras Systems is seeking an Application Security Engineer with a strong focus on Vulnerability Management to secure Cerebras software, infrastructure, and AI platforms. You will own vulnerability management across applications, containers, and cloud services, working with engineering teams to drive remediation and build automation, while reducing manual security work.

Preferred candidates will automate security workflows, contribute to incident response, and help scale processes to support

Qualifications

• Have strong application security or product security fundamentals and hands‑on experience with vulnerability management.
• Understand common vulnerability classes and exploitation techniques across web applications, APIs, authentication systems, cloud services, containers, and software supply chains.
• Can read and reason about code and work effectively with software engineers on practical remediation.
• Have experience with vulnerability scanning and application security technologies such as SAST, SCA, DAST, secrets scanning, container scanning, or CSPM.
• Understand vulnerability prioritization concepts including CVSS, exploitability, asset criticality, internet exposure, compensating controls, and threat intelligence.
• Are comfortable investigating security findings manually rather than relying exclusively on scanner output.
• Can automate security workflows using languages such as Python, Go, or similar scripting/programming languages.
• Have experience integrating security tooling into CI/CD and modern software development workflows.
• Are comfortable working with Linux, Git, containers, and cloud environments.
• Can communicate security risk clearly to both security specialists and engineering teams.
• Approach security with an automation‑first mindset and look for scalable solutions instead of manual processes.

Responsibilities

• Own and continuously improve vulnerability management across applications, software dependencies, containers, operating systems, cloud infrastructure, and externally exposed services.
• Use AI agents and advanced security models to augment vulnerability discovery, code analysis, adversarial testing, prioritization, and remediation.
• Analyze vulnerabilities beyond scanner severity by considering exploitability, exposure, affected assets, available mitigations, and business impact.
• Partner directly with engineering teams to triage findings, determine appropriate remediation, and drive vulnerabilities to closure within risk-based SLAs.
• Build automation for vulnerability ingestion, deduplication, enrichment, prioritization, assignment, remediation tracking, and reporting.
• Identify systemic vulnerability patterns and work with engineering teams to address root causes rather than repeatedly fixing individual findings.
• Operate and improve application security capabilities including SAST, SCA, secrets detection, container scanning, infrastructure scanning, and external attack-surface monitoring.
• Validate security findings through technical investigation and hands-on testing, distinguishing exploitable vulnerabilities from false positives and low-risk findings.
• Perform targeted application security reviews and testing for high-risk services and features.
• Help integrate security controls into CI/CD and developer workflows while minimizing unnecessary friction for engineering teams.
• Develop metrics and reporting that provide meaningful visibility into vulnerability exposure, remediation performance, recurring vulnerability classes, and security risk.
• Evaluate and integrate new security technologies as our software and infrastructure environments evolve.
• Partner with security and engineering teams on incident response when vulnerabilities are actively exploited or require urgent remediation.

Skills

Vulnerability management

Security automation

CI/CD security

SAST / SCA / DAST

Python / Go scripting

Cloud environments

Linux / Git / containers

Security risk communication

Tools

SAST

SCA

DAST

Secrets scanning

Container scanning

CSPM

CI/CD tooling

Job description

Cerebras Systems is seeking an Application Security Engineer with a strong focus on Vulnerability Management to secure Cerebras software, infrastructure, and AI platforms. You will own vulnerability management across applications, containers, and cloud services, working with engineering teams to drive remediation and build automation, while reducing manual security work.

Preferred candidates will automate security workflows, contribute to incident response, and help scale processes to support