Senior AI-Powered AppSec Engineer

Cvent; Virginia (MN); Hybrid; USD 120,000 - 160,000; Full time

Benefits offered by this job

Hybrid work model

Competitive benefits package

Job summary

Cvent is seeking a senior, builder-minded Application Security Engineer to shape the future of AI-powered security in our product portfolio. You will own end-to-end security for assigned areas, architect agentic workflows, and lead the integration of security tooling into CI/CD.

This hybrid role emphasizes hands-on design reviews, risk decisions, and collaboration with leadership. The role requires 5+ years in application security, strong scripting abilities, and cloud security experience.

Qualifications

• 5+ years hands-on experience in application security.
• Strong scripting/programming skills in Python, JavaScript/TypeScript, or Bash.

Responsibilities

• Architect and own AI-first security automation — design agentic systems and skills for end-to-end risk findings.
• Lead the development of security agents and AI tooling — define architecture for LLM-integrated workflows.
• Drive AI-assisted threat modeling at scale — embed methodologies (STRIDE, PASTA, LINDDUN, MITRE ATT&CK).
• Set the standard for AI feature security — define coverage models, audit criteria and OWASP references.
• Own integration and scaling of SAST, DAST, and SCA across CI/CD with automated triage.
• Perform and lead deep secure design reviews, code reviews, threat modeling, and pen testing.
• Own product security for assigned portfolio — drive threat modeling, design reviews, and risk decisions end to end.
• Mentor Engineer II and mid-levels, grow the team’s AI/AppSec capability.
• Communicate risk to engineering and leadership, support ISO 27001, SOC 2, PCI compliance.

Skills

Scripting

CI/CD

Threat modeling

Cloud security

Security tooling

LLM integration

Code review

Automation design

Tools

Burp Suite

Checkmarx

Mend

Veracode

Fortify

ZAP

Wiz

Job description

Cvent is seeking a senior, builder-minded Application Security Engineer to shape the future of AI-powered security in our product portfolio. You will own end-to-end security for assigned areas, architect agentic workflows, and lead the integration of security tooling into CI/CD.

This hybrid role emphasizes hands-on design reviews, risk decisions, and collaboration with leadership. The role requires 5+ years in application security, strong scripting abilities, and cloud security experience.