Description

You will own unified application security triage, remediation guidance, and the implementation of AI-enabled security tooling across SCA, SAST, and DAST findings.

This role is remote.

Responsibilities

• Perform false positive analysis and exploitability assessments to prioritize critical and high-risk vulnerability remediation.
• Engineer, test, and implement AI-enabled security tooling, including proof-of-value execution for new AI capabilities.
• Strengthen software supply chain security through secure dependency selection, SBOM visibility, and detection of malicious packages.
• Assess and improve developer IDE security, including securing plugins and integrating security workflows.
• Handle PatchNow Critical events and coordinate responses for threat intelligence escalations.

Required Skills

• 8-10 years of experience in application security.
• Expertise in SAST, DAST, and SCA code scanning methodologies.
• Hands-on experience with AI-assisted security tooling, including frontier models and coding assistants.
• Working knowledge of prompt orchestration, model evaluation, and AI governance.
• Proficiency with scripting, automation, APIs, and CI/CD workflows.
• Ability to detect and assess malicious code in open-source dependencies.
• Understanding of software supply chain security best practices.

Preferred Skills

• Experience with developer tooling and security platform integrations.
• Background in threat intelligence and vulnerability management.

Key Skills

Education

Any Gradute