Application Security Engineer - Sunnyvale, CA, United States
Originally posted 2 September 2026 by the employer.
Help secure Cerebras software, infrastructure, and AI platforms with a focus on vulnerability management.
About the role
As an Application Security Engineer, you will own and evolve key parts of the vulnerability management program, focusing on vulnerability discovery and risk prioritization through remediation and verification. This role involves understanding vulnerabilities in context, working directly with engineering teams, automating security work, and eliminating classes of vulnerabilities.
What you'll do
- Own and continuously improve vulnerability management across applications, software dependencies, containers, operating systems, cloud infrastructure, and externally exposed services.
- Use AI agents and advanced security models to augment vulnerability discovery, code analysis, adversarial testing, prioritization, and remediation.
- Analyze vulnerabilities beyond scanner severity by considering exploitability, exposure, affected assets, available mitigations, and business impact.
- Partner directly with engineering teams to triage findings, determine appropriate remediation, and drive vulnerabilities to closure within risk-based SLAs.
- Build automation for vulnerability ingestion, deduplication, enrichment, prioritization, assignment, remediation tracking, and reporting.
- Operate and improve application security capabilities including SAST, SCA, secrets detection, container scanning, infrastructure scanning, and external attack-surface monitoring.
What you'll need
- Strong application security or product security fundamentals and hands-on experience with vulnerability management.
- Understanding of common vulnerability classes and exploitation techniques across web applications, APIs, authentication systems, cloud services, containers, and software supply chains.
- Ability to read and reason about code and work effectively with software engineers on practical remediation.
- Experience with vulnerability scanning and application security technologies such as SAST, SCA, DAST, secrets scanning, container scanning, or CSPM.
- Understanding of vulnerability prioritization concepts including CVSS, exploitability, asset criticality, internet exposure, compensating controls, and threat intelligence.
- Comfort investigating security findings manually rather than relying exclusively on scanner output.
- Ability to automate security workflows using languages such as Python, Go, or similar scripting/programming languages.
- Experience integrating security tooling into CI/CD and modern software development workflows.
- Comfort working with Linux, Git, containers, and cloud environments.
Nice to have
- Experience securing AI/ML platforms, inference services, or large-scale compute infrastructure.
- Experience building or operating vulnerability management programs at scale.
- Experience with AWS, Kubernetes, Docker, and cloud-native environments.
- Experience with software supply-chain security and dependency management.
- Experience with GitHub and CI/CD security.
- Experience with threat modeling and secure design reviews.
- Experience with penetration testing or offensive security.
- Experience with external attack-surface management.
- Experience with vulnerability research or exploit validation.
- Experience with security data pipelines, APIs, and workflow automation.
- Experience using LLMs, AI agents, or AI-assisted security tooling for vulnerability research, code analysis, penetration testing, or remediation.
Skills: Application Security Engineer, Vulnerability Management, secure Cerebras software, infrastructure, and AI platforms, vulnerability discovery and risk prioritization, SAST, SCA, secrets detection, container scanning
This role has been open 43 days — well below the 58-day median for Hardware Security Engineering roles.
Hardware Security Engineering · Hardware Security
|
Open roles in category
184
|
Median days open
58 d
|
Median salary
$229k
|
See the full market breakdown ▾Category comparison, skills in demand, and who else is hiring
| Metric | Cerebras | All employers we track in this specialty (184 roles · 47 employers) |
|---|---|---|
| Open roles in this specialty | 4 | 184 |
| Median days open | 34 d | 58 d (−24 d vs this employer) |
| Median salary (USD postings) | — | $229k |
Skills observed across this category: Application Security Engineer, Vulnerability Management, secure Cerebras software, infrastructure, and AI platforms, vulnerability discovery and risk prioritization, SAST, SCA, secrets detection, container scanning
Who's hiring in this category
- NVIDIA · 27 open roles · median 33 d
- NXP Semiconductors · 23 open roles · median 105 d
- Qualcomm · 17 open roles · median 119 d
- Arm Holdings · 13 open roles · median 99 d
- STMicroelectronics · 11 open roles · median 17 d
- AMD · 9 open roles · median 41 d
How we counted: 184 open Hardware Security Engineering (Hardware Security) roles from 47 employers tracked in the SemiconductorJobs index, counted 15 Oct 2026. Specialty figures count only roles carrying this exact specialty label, so an employer's related work in neighbouring specialties is not included there. Figures refresh nightly.