Staff AI-Driven Application Security Engineer

Aurora Innovation Inc.; Washington (Washington County); Hybrid; USD 171,000 - 273,000; Full time

Job summary

Aurora is seeking a Staff Application Security Engineer to lead security across the driverless truck product and infrastructure. You will partner with engineering teams, build and maintain an AI-native application security program, and drive secure design, tooling, and automation across the software development lifecycle.

You will mentor engineers, perform threat modeling, code reviews, and integrate preventative controls.

Qualifications

• 8+ years of experience in security, applications security engineering, or product security roles.
• Substantial experience building and maintaining production software, with strong programming, debugging, and system design skills.
• Ability to investigate unfamiliar codebases, understand system behavior, and reason about potential misuse.
• Experience delivering technical work across teams in a large or complex engineering organization.
• Demonstrated ability to threat model systems, explain technical risks, and tradeoffs clearly and collaborate with engineers on practical solutions.
• Experience building developer tooling, automation, or software development lifecycle integrations.
• Practical experience using AI to support technical work, with the judgment to validate its output and explain the underlying reasoning.
• Hands-on experience building or maintaining both cloud and embedded systems, ideally with deep technical knowledge of each.
• Experience developing software for safety-critical products or their supporting infrastructure, particularly autonomous vehicle technology.
• Application or product security experience, including in-depth code audits, secure design reviews, threat modeling, or vulnerability investigation.
• Experience building and maintaining production AI-assisted security tooling or automation.

Responsibilities

• Partner with engineering teams on fixes and secure design improvements, contributing code directly.
• Investigate findings and their practical impact, bringing clear evidence and possible solutions when engaging the responsible teams.
• Help build and maintain the application security program and its tooling, using AI to scale investigation while validating results.
• Build automation and integrate preventative controls into the software development lifecycle to reduce recurring risks and friction.

Skills

Security engineering

Threat modeling

Code review

Automation tooling

AI-assisted security

Cloud and embedded

Cross-functional collaboration

Programming

Job description

Aurora is seeking a Staff Application Security Engineer to lead security across the driverless truck product and infrastructure. You will partner with engineering teams, build and maintain an AI-native application security program, and drive secure design, tooling, and automation across the software development lifecycle.

You will mentor engineers, perform threat modeling, code reviews, and integrate preventative controls.