Staff AppSec Engineer - AI-Driven Security for Autonomy

Pittsburgh Robotics Network; Pittsburgh (Allegheny County); Hybrid; USD 171,000 - 273,000; Full time

Job summary

Aurora seeks a Staff Application Security Engineer to build and maintain an AI-native application security program for its driverless truck product and supporting infrastructure. This is a builder-first role for someone who enjoys understanding complex systems and collaborating with engineers to improve security across the stack.

You will work with teams to implement secure design practices, automate controls, and scale security using AI, all while maintaining a pragmatic, developer-friendly

Qualifications

• 8+ years in security, applications security engineering, or product security.
• Strong programming, debugging, and system design skills for production software.
• Ability to investigate unfamiliar codebases and reason about misuse.
• Experience delivering technical work across teams in a large organization.
• Threat modeling and clear risk communication with engineers.
• Experience building developer tooling or automation in SDLC integrations.
• Practical AI experience to support technical work with validated outputs.
• Proficiency in C, C++, Go, Python, JavaScript and web frameworks.

Responsibilities

• Partner with engineering teams on fixes and secure design improvements, contributing code directly.
• Investigate findings with evidence and present solutions to responsible teams.
• Help build and maintain the application security program and tooling, using AI to scale investigations.
• Build automation and integrate preventative controls into the SDLC to reduce risks.

Skills

Security engineering

Production software

Threat modeling

AI-assisted tooling

Programming languages

Cross-team collaboration

System design

Tools

Developer tooling

CI/CD

Automation tooling

Job description

Aurora seeks a Staff Application Security Engineer to build and maintain an AI-native application security program for its driverless truck product and supporting infrastructure. This is a builder-first role for someone who enjoys understanding complex systems and collaborating with engineers to improve security across the stack.

You will work with teams to implement secure design practices, automate controls, and scale security using AI, all while maintaining a pragmatic, developer-friendly