Senior AI-Driven AppSec Engineer (Agentic Security)

Cardinal Health, Inc.; Field (NM); On-site; USD 170,000 - 230,000; Full time

Job summary

Cardinal Health, Inc. is seeking an Application Security Engineer, AI and Agentic Security, to design, prototype, and operationalize generative AI capabilities within Application Security.

The role blends hands-on software engineering with security expertise to enable scalable, auditable AI-assisted vulnerability identification and secure code guidance. You will collaborate across security, software engineering, cloud, and governance teams to translate experiments into enterprise-ready

Qualifications

• Strong hands-on Python development experience, including API integration, automation, testing, data handling, and production-quality engineering practices.
• Experience building or integrating solutions using large language models, model APIs, retrieval-augmented generation, tool calling, structured outputs, workflow orchestration, or agent frameworks.
• Experience designing and evaluating agentic workflows that use tools, maintain state, make bounded decisions, and operate with human approval where appropriate.
• Strong understanding of secure software development, common application vulnerabilities, threat modeling, secure design, authentication and authorization, secrets management, and software supply chain risk.
• Experience with Application Security capabilities such as SAST, SCA, secrets detection, DAST, API security, container security, IaC security, and vulnerability remediation workflows.
• Experience with Git-based development, pull requests, CI/CD, automated testing, containers, Kubernetes, and cloud-native development patterns.

Responsibilities

• Design, prototype, evaluate, and operationalize AI-enabled security capabilities within Application Security.
• Develop Python-based services, automation, integrations, evaluation harnesses, and supporting tools.
• Evaluate AI-enabled security products and frameworks for vulnerability discovery, exploitability analysis, secure code guidance, remediation, validation, and developer workflow integration.
• Create controlled workflows where AI analyzes code, uses tools, recommends changes, executes tests, and provides auditable evidence with human oversight.
• Establish guardrails for identity, least privilege, data access, tool use, secrets handling, logging, change control, and safe termination.
• Develop test plans and benchmarks to assess accuracy, security, reliability, latency, and operational value.
• Perform security testing of AI workflows, including prompt injection, unsafe tool use, data leakage, and authorization failures.
• Integrate capabilities with source control, CI/CD pipelines, developer tools, and vulnerability management workflows.
• Define reference architectures, runbooks, and support models for approved capabilities.
• Partner with governance to ensure alignment with enterprise AI, security, privacy, and technology standards.

Skills

Python development

AI-enabled security engineering

Security testing

Threat modeling

Secure software development

Git-based development

Tools

Git

CI/CD

Containers

Kubernetes

Cloud-native development

Model APIs

Job description

Cardinal Health, Inc. is seeking an Application Security Engineer, AI and Agentic Security, to design, prototype, and operationalize generative AI capabilities within Application Security.

The role blends hands-on software engineering with security expertise to enable scalable, auditable AI-assisted vulnerability identification and secure code guidance. You will collaborate across security, software engineering, cloud, and governance teams to translate experiments into enterprise-ready