> Markdown version of [/jobs/ext/4013335-application-security-ai-engineer](https://www.wearedevelopers.com/jobs/ext/4013335-application-security-ai-engineer). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Application Security AI Engineer

- **Company:** EXPERT RECRUITING SOLUTIONS, LLC
- **Location:** New York, NY, United States
- **Experience:** Expert
- **Contract:** Permanent contract
- **Skills:** Application Programming Interfaces (APIs), Artificial Intelligence, Code Review, Continuous Integration, Programming Tools, Open Source Technology, Package Management Systems, Software Vulnerability Management, Software Security, Model Validation, Cyber Threat Analysis, Enterprise Integration, Static Application Security Testing, Dynamic Application Security Testing
- **Published:** October 29, 2026
- **Apply:** https://www.thejobnetwork.com/job/e96fc87d-7c36-4262-a97a-c6f708490d1f/application-security-ai-engineer

## About the Role

* 8-10 years of experience in application security
 * Expertise in code scanning methodologies including static scanning (SAST), dynamic scanning (DAST), and open source scanning (SCA)
 * Strong background in SCA/SAST/DAST triage, vulnerability management, and threat intelligence
 * Hands-on experience with AI-assisted security tooling and AI-enabled security tools, including frontier models and coding assistants
 * Working knowledge of prompt and tool orchestration, model evaluation, and AI governance
 * Proficiency with scripting and automation, APIs, and CI/CD workflows
 * Experience with developer tooling, security platform integrations, IDE security, and package managers
 * Capability to detect and assess malicious code in open-source dependencies
 * Understanding of software supply chain security best practices

## Description

* Provide unified application security triage coverage across SCA, SAST, and DAST findings, including validation of critical and high-risk vulnerabilities
 * Perform false positive analysis and exploitability assessment to prioritize remediation efforts
 * Provide remediation guidance, escalation support, and handle PatchNow Critical events
 * Assess and coordinate responses for threat intelligence escalations and monitor newly disclosed vulnerabilities
 * Engineer, test, and implement AI-enabled security tooling, including support for evaluation of new AI capabilities and technical proof-of-value execution
 * Strengthen software supply chain security through secure open-source dependency selection, SBOM and component visibility support, and detection of malicious packages
 * Assess and improve developer IDE security, including securing plugins/extensions and developer workflows