Vulnerability-Driven Application Security Engineer

Cerebras; Sunnyvale (CA); Hybrid; USD 150,000 - 230,000; Full time

Job summary

Cerebras Systems in Sunnyvale seeks an Application Security Engineer focused on vulnerability management to secure software, infrastructure, and AI platforms. You will own key parts of the program from discovery to remediation, working directly with engineering teams, and driving automated security workflows.

The role emphasizes an automation-first mindset, scalable security processes, and collaboration across security, infra, and IT.

Qualifications

• Strong application security fundamentals with hands-on vulnerability management experience.
• Knowledge of web apps, APIs, auth systems, cloud services, containers, and software supply chains.
• Ability read and reason about code and work with engineers on remediation.
• Experience with security tooling: SAST, SCA, DAST, secrets scanning, container scanning, CSPM.
• Understanding of CVSS, exploitability, asset criticality, and threat intelligence.

Responsibilities

• Own and improve vulnerability management across apps, software dependencies, containers, OS, cloud infra, and external services.
• Use AI agents and advanced security models to augment discovery, code analysis, testing, prioritization, and remediation.
• Triage findings with engineering, determine remediation, and drive closure within risk-based SLAs.
• Build automation for vulnerability ingestion, deduplication, enrichment, prioritization, and reporting.
• Identify systemic vulnerability patterns and address root causes with engineering teams.

Skills

Application security

Vulnerability management

Automation

Python/Go

CI/CD security

Linux

Git

Cloud environments

Communication

Threat modeling

Tools

SAST

SCA

DAST

Secrets scanning

Container scanning

CSPM

CI/CD tooling

Job description

Cerebras Systems in Sunnyvale seeks an Application Security Engineer focused on vulnerability management to secure software, infrastructure, and AI platforms. You will own key parts of the program from discovery to remediation, working directly with engineering teams, and driving automated security workflows.

The role emphasizes an automation-first mindset, scalable security processes, and collaboration across security, infra, and IT.