Application Security Engineer

• Conduct in-depth code reviews and static analysis to identify and mitigate security vulnerabilities in our applications
• Design and implement secure coding guidelines and best practices for development teams
• Collaborate closely with development teams to integrate security practices throughout the CI/CD pipeline
• Perform threat modeling and risk assessments for applications, developing mitigation strategies for potential risks
• Manage vulnerability tracking and remediation efforts, providing guidance to development teams
• Support incident response activities related to application security
• Stay current on emerging security threats and trends in cloud-native technologies and AI, continuously enhancing our security measures
• Evaluate and secure software supply chains, including producing and maintaining Software Bills of Materials (SBOMs)
• Address security concerns specific to AI and machine learning models, with a focus on the OWASP LLM Top 10

This role creates positive change by ensuring the security and integrity of AI systems that aim to accurately understand the universe and aid humanity in its pursuit of knowledge, helping to build trustworthy technology that benefits society.

• Bachelor's degree in Computer Science, Cybersecurity, or a related field
• 3-5 years of experience in application security, with a strong focus on code security practices
• Deep understanding of secure coding practices, application security frameworks, and common vulnerabilities (e.g., OWASP Top 10)
• Proficiency in Python or Rust programming languages and experience with secure coding practices in these languages
• Experience securing CI/CD pipelines and implementing DevSecOps practices
• Familiarity with software supply chain security and SBOM generation tools
• Experience with security testing tools (e.g., Burp Suite, OWASP ZAP) and static/dynamic code analysis
• Understanding of AI/ML security implications, particularly those outlined in the OWASP LLM Top 10
• Excellent communication skills, able to explain complex security issues to both technical and non-technical audiences

Base salary is just one part of our total rewards package at xAI, which also includes equity, comprehensive medical, vision, and dental coverage, access to a 401(k) retirement plan, short & long-term disability insurance, life insurance, and various other discounts and perks.