Senior AI-Driven AppSec Engineer - Remote

Cardinal Health, Inc.; Annapolis (MD); Remote; USD 125,000 - 179,000; Full time

Benefits offered by this job

Medical, dental and vision coverage

Paid time off plan

Health savings account (HSA)

401k savings plan

Paid parental leave

Flexible spending accounts (FSAs)

Paid time off plan

Job summary

Cardinal Health, Inc. is seeking an experienced Application Security Engineer, AI and Agentic Security, to design and operationalize AI-enabled security across the software development lifecycle.

You will prototype and productionize generative AI capabilities, integrate with CI/CD, and collaborate with security, software engineering, and governance teams. The role requires strong Python development, hands-on experience with LLMs and AI tooling, and a focus on secure, auditable workflows with

Qualifications

• Demonstrated proficiency developing solutions in Python.
• Hands-on experience with generative AI application development, LLM integration, agentic systems, or AI-enabled developer tooling.
• Experience with cloud services, containers, Kubernetes, infrastructure as code, and enterprise developer platforms.
• Experience with AI evaluation, adversarial testing, red teaming, observability, or governance controls for AI-enabled systems.

Responsibilities

• Design, build, and test prototypes and production-ready capabilities using generative AI, large language models, AI agents, and multi-step agentic workflows.
• Develop Python-based services, automation, integrations, evaluation harnesses, and supporting tools for Application Security use cases.
• Evaluate AI-enabled security products and frameworks for vulnerability discovery, exploitability analysis, secure code guidance, remediation, validation, and developer workflow integration.
• Establish technical guardrails for agent identity, least privilege, data access, tool use, repository access, secrets handling, logging, traceability, change control, and safe failure or termination.
• Develop test plans and benchmarks to assess accuracy, security, reliability, repeatability, cost, latency, false positives, remediation quality, and operational value.
• Perform security testing of AI and agentic workflows, including prompt injection, unsafe tool use, excessive agency, data leakage, insecure output handling, dependency and supply chain risks, and authorization failures.

Skills

Python development

AI/Agentic workflows

Cloud native development

Security engineering

CI/CD and DevSecOps

Cross-functional collaboration

Technical writing

Education

Bachelor's degree in CS/SE/cybersecurity or related field

Tools

Java

JavaScript/TypeScript

.NET/C#

Go

Kubernetes

Docker

CI/CD

Infrastructure as Code

Git

Cloud services

Job description

Cardinal Health, Inc. is seeking an experienced Application Security Engineer, AI and Agentic Security, to design and operationalize AI-enabled security across the software development lifecycle.

You will prototype and productionize generative AI capabilities, integrate with CI/CD, and collaborate with security, software engineering, and governance teams. The role requires strong Python development, hands-on experience with LLMs and AI tooling, and a focus on secure, auditable workflows with