Cloud-Native Application Security Engineer

Pantera Capital; Palo Alto (CA); On-site; USD 100,000 - 258,000; Full time

Benefits offered by this job

Equity

Medical coverage

401(k)

Job summary

xAI in Palo Alto is seeking an Application Security Engineer to strengthen our cloud-native applications and AI systems across the software development lifecycle. You will focus on code security, CI/CD pipelines, and emerging AI technologies while collaborating with engineering teams to embed security by design.

We expect 3–5 years in application security, expertise in secure coding with Python or Rust, and experience with security testing tools and SBOMs.

Qualifications

• Bachelor’s degree in Computer Science, Cybersecurity, or related field.
• 3–5 years of experience in application security with focus on code security.
• Deep understanding of secure coding practices, OWASP Top 10.
• Proficiency in Python or Rust and secure coding practices in these languages.
• Experience securing CI/CD pipelines and DevSecOps practices.
• Familiarity with software supply chain security and SBOM generation tools.
• Experience with security testing tools (Burp Suite, OWASP ZAP) and static/dynamic analysis.
• Understanding of AI/ML security implications, OWASP LLM Top 10.
• Excellent communication skills to explain security to technical and non-technical audiences.

Responsibilities

• Conduct in-depth code reviews and static analysis to identify vulnerabilities.
• Design and implement secure coding guidelines for development teams.
• Collaborate with development teams to integrate security into the CI/CD pipeline.
• Perform threat modeling and risk assessments for applications.
• Manage vulnerability tracking and remediation guidance for development teams.
• Support incident response activities related to application security.
• Stay current on emerging security threats in cloud-native tech and AI.
• Evaluate and secure software supply chains, SBOMs.
• Address security concerns for AI/ML models, focusing on OWASP LLM Top 10.

Skills

Python or Rust

Secure coding practices

Communication skills

DevSecOps

Threat modeling

Education

Bachelor’s degree in Computer Science, Cybersecurity, or related field

Tools

Burp Suite

OWASP ZAP

SBOM generation tools

Job description

xAI in Palo Alto is seeking an Application Security Engineer to strengthen our cloud-native applications and AI systems across the software development lifecycle. You will focus on code security, CI/CD pipelines, and emerging AI technologies while collaborating with engineering teams to embed security by design.

We expect 3–5 years in application security, expertise in secure coding with Python or Rust, and experience with security testing tools and SBOMs.