Senior AI Agentic App Sec Engineer
Cardinal Health, Inc.3 days ago
Remote, United StatesSenior
Base Salary
$125k - $179k/yr
Responsibilities
- Design, build, test, and operationalize generative AI, LLM, and agentic capabilities for Application Security.
- Develop Python services, automation, integrations, evaluation harnesses, and supporting security tools.
- Evaluate AI-enabled security products and frameworks for vulnerability discovery, exploitability analysis, secure code guidance, remediation, validation, and developer workflow integration.
- Create controlled AI workflows that analyze code, use approved tools, recommend or generate changes, execute tests, and produce auditable evidence with human oversight.
- Establish guardrails for agent identity, least privilege, data access, tool use, repository access, secrets handling, logging, traceability, change control, and safe termination.
- Develop benchmarks and test plans covering accuracy, security, reliability, repeatability, cost, latency, false positives, remediation quality, and operational value.
- Perform security testing of AI and agentic workflows, including prompt injection, unsafe tool use, excessive agency, data leakage, insecure output handling, supply chain risks, and authorization failures.
- Integrate capabilities with source control, CI/CD pipelines, developer tools, issue management, security testing platforms, and vulnerability management workflows.
- Define reference architectures, reusable patterns, technical requirements, runbooks, and operational support models.
- Partner with application, platform, architecture, governance, and security teams to pilot, measure, govern, and scale emerging capabilities.
Requirements
- Bachelor's degree in computer science, software engineering, cybersecurity, information systems, or a related field, or equivalent practical experience.
- Substantial experience in software engineering, security engineering, Application Security, DevSecOps, or a closely related technical discipline.
- Demonstrated proficiency developing production-quality solutions in Python.
- Strong understanding of secure software development, Application Security concepts, common vulnerabilities, threat modeling, authentication, authorization, secrets management, and software supply chain risk.
- Hands-on experience with generative AI application development, LLM integration, agentic systems, or AI-enabled developer tooling.
- Experience with LLM APIs, retrieval-augmented generation, tool calling, structured outputs, workflow orchestration, or agent frameworks.
- Experience with SAST, SCA, secrets detection, DAST, API security, container security, IaC security, or vulnerability remediation workflows.
- Experience with Git-based development, pull requests, CI/CD, automated testing, containers, Kubernetes, cloud services, infrastructure as code, or enterprise developer platforms.
- Experience evaluating AI systems through repeatable test cases, metrics, adversarial testing, red teaming, observability, or governance controls.
- Experience with an additional language or platform such as Java, JavaScript/TypeScript, .NET/C#, or Go.
- Knowledge of OWASP Top 10, OWASP guidance for LLM or agentic applications, NIST Secure Software Development Framework, and NIST AI Risk Management Framework.
- Strong technical writing, presentation, problem-solving, mentoring, and cross-functional collaboration skills.
- Relevant credentials such as CISSP, CSSLP, CCSP, GWEB, or cloud-provider certifications are beneficial but not required.
Benefits
- Medical, dental, and vision coverage.
- Paid time off, health savings account, flexible spending accounts, short- and long-term disability coverage, and 401k savings plan.
- Paid parental leave, work-life resources, healthy lifestyle programs, and access to wages before payday through myFlexPay.
- Bonus eligible.
- Application window is anticipated to close on 12/23/2026.
Tech Stack
Categories
About Cardinal Health, Inc.
Cardinal Health is a public healthcare services company that distributes pharmaceuticals and medical products to hospitals, pharmacies, and healthcare providers, and manufactures a range of medical and laboratory supplies. It also operates nuclear pharmacies and offers data and performance solutions for healthcare operations. Founded in 1971 and headquartered in Dublin, Ohio, Cardinal Health trades on the NYSE under the ticker CAH and serves customers globally across care settings.