5 months ago
Palo Alto, CA, USAMid Level / Senior
H1B sponsor
Base Salary
$200k - $340k/yr
Responsibilities
- Conduct code reviews and static analysis to identify and mitigate application vulnerabilities.
- Create secure coding guidelines and best practices for development teams.
- Integrate security practices throughout CI/CD pipelines and collaborate with development teams on DevSecOps.
- Perform threat modeling and risk assessments and develop mitigation strategies.
- Manage vulnerability tracking and remediation efforts.
- Support application security incident response activities.
- Monitor emerging security threats in cloud-native technologies and AI and enhance security measures.
- Evaluate and secure software supply chains, including producing and maintaining SBOMs.
- Address security risks in AI and machine learning models with a focus on the OWASP LLM Top 10.
Requirements
- Bachelor's degree in Computer Science, Cybersecurity, or a related field.
- 3–5 years of application security experience with a strong focus on code security practices.
- Deep understanding of secure coding practices, application security frameworks, and common vulnerabilities including the OWASP Top 10.
- Proficiency in Python or Rust and experience applying secure coding practices in those languages.
- Experience securing CI/CD pipelines and implementing DevSecOps practices.
- Familiarity with software supply chain security and SBOM generation tools.
- Experience with security testing tools such as Burp Suite and OWASP ZAP, plus static and dynamic code analysis.
- Understanding of AI/ML security implications, particularly the OWASP LLM Top 10.
- Excellent communication skills for explaining complex security issues to technical and non-technical audiences.
- Preferred experience with GCP, AWS, or Azure and their security features.
- Preferred security certifications such as CSSLP or OSWE.
- Preferred background in data privacy and compliance regulations for cloud-native applications and AI systems.
- Preferred experience with GitOps, infrastructure-as-code security, federated learning, privacy-preserving machine learning, custom security tooling, open-source security projects, and securing AI/ML models and data pipelines.
Benefits
- Equity is included in the total rewards package.
- Comprehensive medical, vision, and dental coverage.
- Access to a 401(k) retirement plan.
- Short- and long-term disability insurance.
- Life insurance, discounts, and other perks.
About xAI
Understand the Universe. We are a team of AI technologists and business leaders on a mission to build AI systems that can help humanity understand the world better. https://x.ai/careers