> Markdown version of [/jobs/ext/3843850-staff-application-security-engineer](https://www.wearedevelopers.com/jobs/ext/3843850-staff-application-security-engineer). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Staff Application Security Engineer

- **Company:** Aurora Innovation, Inc.
- **Location:** Pittsburgh, PA, United States
- **Salary:** $189,000.0 - $303,000.0
- **Contract:** Permanent contract
- **Skills:** JavaScript (Programming Language), Artificial Intelligence, Build Automation, C++ (Programming Language), Computer Programming, Software Debugging, Programming Tools, Python (Programming Language), Systems Development Life Cycle, Software Engineering, Systems Integration, Web Application Frameworks, Software Security, Golang
- **Published:** October 20, 2026
- **Apply:** https://www.careerbuilder.com/job-details/staff-application-security-engineer-pittsburgh-pa--d614d19c-c3b8-4408-ad2d-c7799e642205

## About the Role

Applications Security, Software Engineering, Logistics, LinkedIn, Diversity, Ecosystems, Applications Security, Artificial Intelligence (AI), Software Development Lifecycle (SDLC), Automation, * Substantial experience building and maintaining production software, with strong programming, debugging, and system design skills.

 * Ability to investigate unfamiliar codebases, understand system behavior, and reason about potential misuse.
 * Experience delivering technical work across teams in a large or complex engineering organization.
 * Demonstrated ability to threat model systems, explain technical risks, and tradeoffs clearly and collaborate with engineers on practical solutions.
 * Experience building developer tooling, automation, or software development lifecycle integrations.
 * Practical experience using AI to support technical work, with the judgment to validate its output and explain the underlying reasoning.
 * Experience with languages in our stack: C, C++, Go, Python, JavaScript, and web frameworks.

Desirable qualifications

 * Hands-on experience building or maintaining both cloud and embedded systems, ideally with deep technical knowledge of each.
 * Experience developing software for safety-critical products or their supporting infrastructure, particularly autonomous vehicle technology.
 * Application or product security experience, including in-depth code audits, secure design reviews, threat modeling, or vulnerability investigation.
 * Experience building and maintaining production AI-assisted security tooling or automation.

## Description

We're looking for a Staff Application Security Engineer with a strong software engineering background to help build and maintain an AI-native application security program for our driverless truck product and supporting infrastructure. This is a builder-first role for someone who enjoys understanding complex systems and working alongside engineers to improve them. You'll collaborate on fixes and design-level improvements, build automation, and make security a low-friction part of the software development lifecycle. You'll use AI thoughtfully to scale your attention while applying your own engineering judgment.

In this role you will

 * Partner with engineering teams on fixes and secure design improvements, contributing code directly.
 * Investigate findings and their practical impact, bringing clear evidence and possible solutions when engaging the responsible teams.
 * Help build and maintain the application security program and its tooling, using AI to scale investigation while validating results.
 * Build automation and integrate preventative controls into the software development lifecycle to reduce recurring risks and friction.