Application Security Engineer

Job summary

Responsibilities

We are looking for an Application Security Engineer with a strong focus on Vulnerability Management to help secure Cerebras software, infrastructure, and AI platforms.

• Own and continuously improve vulnerability management across applications, software dependencies, containers, operating systems, cloud infrastructure, and externally exposed…
• Use AI agents and advanced security models to augment vulnerability discovery, code analysis, adversarial testing, prioritization, and remediation.
• Analyze vulnerabilities beyond scanner severity by considering exploitability, exposure, affected assets, available mitigations, and business impact.
• Partner directly with engineering teams to triage findings, determine appropriate remediation, and drive vulnerabilities to closure within risk-based SLAs.
• Build automation for vulnerability ingestion, deduplication, enrichment, prioritization, assignment, remediation tracking, and reporting.

What they're looking for

• Have strong application security or product security fundamentals and hands-on experience with vulnerability management.
• Understand common vulnerability classes and exploitation techniques across web applications, APIs, authentication systems, cloud services, containers, and software supply chains.
• Can read and reason about code and work effectively with software engineers on practical remediation.
• Have experience with vulnerability scanning and application security technologies such as SAST, SCA, DAST, secrets scanning, container scanning, or CSPM.
• Understand vulnerability prioritization concepts including CVSS, exploitability, asset criticality, internet exposure, compensating controls, and threat intelligence.

Tech stack

• Python
• Go
• AWS
• Kubernetes
• Docker