Staff Application Security Engineer (AI-Driven)

Aurora; San Francisco (CA); Hybrid; USD 171,000 - 303,000; Full time

Benefits offered by this job

Hybrid work model

Job summary

Aurora is hiring a Staff Application Security Engineer with a strong software engineering background to help build and maintain an AI-native application security program for the driverless truck product and supporting infrastructure.

You will collaborate with engineers to improve design, fix issues, and automate security tools, while applying sound engineering judgment. This builder-first role emphasizes scalable security practices across the software lifecycle.

Qualifications

• 8+ years in security or product security roles.
• Production software development experience with strong programming and system design skills.
• Ability to analyze unfamiliar codebases and assess potential misuse.
• Experience delivering work across a large engineering organization.
• Threat modeling and communicating risk with engineers on practical solutions.
• Experience building developer tooling, automation, or SDLC integrations.
• Practical use of AI to support technical work with validated outputs.

Responsibilities

• Partner with engineering on fixes and secure design improvements, contributing code.
• Investigate findings with evidence and propose solutions to responsible teams.
• Help build and maintain the application security program and tooling, using AI to scale investigations.
• Build automation and integrate preventative controls into the SDLC to reduce risks and friction.

Skills

Security engineering

Threat modeling

AI-assisted tooling

Developer tooling

Software development lifecycle

Cross-team collaboration

Education

Bachelor's degree in a related field

Tools

C

C++

Go

Python

JavaScript

Job description

Aurora is hiring a Staff Application Security Engineer with a strong software engineering background to help build and maintain an AI-native application security program for the driverless truck product and supporting infrastructure.

You will collaborate with engineers to improve design, fix issues, and automate security tools, while applying sound engineering judgment. This builder-first role emphasizes scalable security practices across the software lifecycle.