Automation-First Application Security Engineer (Vulnerability Mgmt)

Cerebras; Sunnyvale (CA); On-site; USD 170,000 - 210,000; Full time

Job summary

Cerebras Systems is seeking an Application Security Engineer with a strong focus on Vulnerability Management in Sunnyvale, CA. You will own the vulnerability program, collaborate with engineering, and build automated workflows to reduce risk across applications, containers, and cloud environments.

The role emphasizes prioritization beyond scanners, risk-based SLAs, and scalable security practices. You will work with AI-assisted discovery, triage findings, and drive remediation through modern

Qualifications

• Strong application security fundamentals with hands-on vulnerability management experience.
• Understanding vulnerability classes and exploitation techniques in web apps, APIs, cloud services, containers, and supply chains.
• Ability read and reason about code and work with engineers on remediation.
• Experience with vulnerability scanning technologies (SAST, SCA, DAST, secrets scanning, container scanning, CSPM).
• Understanding CVSS, exploitability, asset criticality, and threat intelligence for prioritization.
• Able to automate security workflows using Python, Go or similar languages.
• Experience integrating security tooling into CI/CD and modern dev workflows.
• Comfortable with Linux, Git, containers, and cloud environments.
• Excellent communication of risk to both security and engineering teams.
• Automation-first mindset and scalable security solutions.

Responsibilities

• Own and improve vulnerability management across apps, infra, and services.
• Use AI agents and advanced security models to augment discovery, analysis, and remediation.
• Prioritize vulnerabilities by exploitability, exposure, and business impact.
• Triage findings with engineering and drive remediation within SLAs.
• Build automation for ingestion, deduplication, enrichment, and reporting.
• Identify systemic vulnerabilities and address root causes.
• Operate and improve SAST, SCA, secrets, container, and cloud scanning capabilities.
• Validate findings through hands-on testing and remove false positives.
• Conduct targeted security reviews for high-risk services and features.
• Integrate security controls into CI/CD and developer workflows.
• Develop metrics to show exposure and remediation performance.
• Evaluate and adopt new security technologies as ecosystems evolve.
• Collaborate with teams on incident response when needed.

Skills

App security

Vulnerability management

Code reasoning with engineers

CI/CD security

Automation (Python/Go)

Security tooling integration

Clear security communication

Automation-first mindset

Tools

SAST

SCA

DAST

Secrets scanning

Container scanning

CSPM

AWS

Kubernetes

Docker

Job description

Cerebras Systems is seeking an Application Security Engineer with a strong focus on Vulnerability Management in Sunnyvale, CA. You will own the vulnerability program, collaborate with engineering, and build automated workflows to reduce risk across applications, containers, and cloud environments.

The role emphasizes prioritization beyond scanners, risk-based SLAs, and scalable security practices. You will work with AI-assisted discovery, triage findings, and drive remediation through modern