Application Security Engineer

• Conduct in-depth code reviews and static analysis to identify and mitigate security vulnerabilities in our applications
• Design and implement secure coding guidelines and best practices for development teams
• Collaborate closely with development teams to integrate security practices throughout the CI/CD pipeline
• Perform threat modeling and risk assessments for applications, developing mitigation strategies for potential risks
• Manage vulnerability tracking and remediation efforts, providing guidance to development teams
• Support incident response activities related to application security
• Stay current on emerging security threats and trends in cloud-native technologies and AI, continuously enhancing our security measures
• Evaluate and secure software supply chains, including producing and maintaining Software Bills of Materials (SBOMs)
• Address security concerns specific to AI and machine learning models, with a focus on the OWASP LLM Top 10

Applications Security, Software Engineering, Applications Security, Artificial Intelligence (AI), Software Development Lifecycle (SDLC), Emerging Technology, Software Engineering, Continuous Integration, Continuous Deployment/Delivery, Cloud Applications, * Bachelor’s degree in computer science, cybersecurity, or scientific discipline

• 3+ years of experience in application security, with a focus on code security practices
• Experience with Python or Rust, and secure coding practices in these languages

PREFERRED SKILLS AND EXPERIENCE:

• Deep understanding of secure coding practices, application security frameworks, and common vulnerabilities (e.g., OWASP Top 10)
• Understanding of AI/ML security implications, particularly those outlined in the OWASP LLM Top 10
• Experience securing CI/CD pipelines and implementing DevSecOps practices
• Familiarity with software supply chain security and SBOM generation tools
• Experience with security testing tools (e.g., Burp Suite, OWASP ZAP) and static/dynamic code analysis
• Excellent communication skills, able to explain complex security issues to both technical and non-technical audiences
• Experience with cloud platforms (e.g., GCP, AWS, Azure) and their security features
• Relevant security certifications (e.g., CSSLP, OSWE)
• Background in data privacy and compliance regulations relevant to cloud-native applications and AI systems
• Experience with GitOps and infrastructure-as-code security
• Familiarity with federated learning and privacy-preserving machine learning techniques
• Experience in building custom security tooling to enhance and automate security processes
• Interest in leveraging AI to automate security tasks and improve efficiency
• Contributions to open-source security projects or tools
• Experience in securing AI/ML models and data pipelines

$100,000 - $258,000 USD

Base salary is just one part of our total rewards package at SpaceXSI, which also includes equity, comprehensive medical, vision, and dental coverage, access to a 401(k) retirement plan, short & long-term disability insurance, life insurance, and various other discounts and perks.

SpaceXSI is an equal opportunity employer. For details on data processing, view our Recruitment Privacy Notice.

Create a Job Alert

Interested in building your career at SpaceXSI? Get future opportunities sent straight to your email.

Create alert

SpaceX was founded under the belief that a future where humanity is out exploring the stars is fundamentally more exciting than one where we are not. Today, SpaceX is actively developing the technologies to make this possible, with the ultimate goal of making life multiplanetary and expanding consciousness to the stars.

SpaceXSI is building Super Intelligence to help humanity understand the universe. Our teams are building the full Super Intelligence stack: from our Colossus supercomputers, to Grok models, to our suite of applications, including Grok Bot, Grok Build, Grok Imagine, Grok Voice, and X. We’re creating a powerful flywheel where more compute trains better models, better models power more useful products, and what we learn from people using those products shapes what we build next.