Staff Application Security Engineer — AI-Driven App Sec

Aurora; Mountain View (CA); Hybrid; USD 189,000 - 303,000; Full time

Job summary

Aurora is seeking a Staff Application Security Engineer to help build and maintain an AI-native application security program for our driverless truck product and infrastructure. This builder-first role works with engineers to improve security, implement fixes, automate tasks, and integrate security into the software development lifecycle with scalable AI-assisted approaches.

You'll collaborate across teams to threat model systems and design secure architectures while developing developer tooling

Qualifications

• 8+ years of experience in security, applications security engineering, or product security.
• Strong programming, debugging, and system design skills across production software.
• Ability to investigate unfamiliar codebases and reason about potential misuse.
• Experience delivering technical work across large engineering teams.
• Threat modeling and communicating risks clearly with engineers.
• Experience building developer tooling, automation, or SDLC integrations.
• Experience using AI to support technical work with validated results.
• Experience with C, C++, Go, Python, and JavaScript.

Responsibilities

• Partner with engineering on fixes and secure design improvements, contributing code.
• Investigate findings with clear evidence and propose solutions.
• Help build and maintain the application security program and tooling.
• Build automation and preventative controls in the SDLC.

Skills

App security

Programming

Codebase exploration

Threat modeling

Dev tooling

AI tooling

Cross-team work

C/C++/Go/Python/JS

Job description

Aurora is seeking a Staff Application Security Engineer to help build and maintain an AI-native application security program for our driverless truck product and infrastructure. This builder-first role works with engineers to improve security, implement fixes, automate tasks, and integrate security into the software development lifecycle with scalable AI-assisted approaches.

You'll collaborate across teams to threat model systems and design secure architectures while developing developer tooling