Application Security Engineer - Vulnerability Management

About the role

Cerebras Systems builds the world's largest AI chip and works with leading model labs, global enterprises and AI-native startups. It is looking for an Application Security Engineer focused on vulnerability management to secure its software, infrastructure and AI platforms. You will own and evolve key parts of the vulnerability management program, from discovery and risk prioritization through remediation and verification, working directly with engineering teams and automating repetitive security work.

Key responsibilities

• Own and improve vulnerability management across applications, dependencies, containers, operating systems, cloud infrastructure and exposed services.
• Use AI agents and advanced security models to augment discovery, code analysis, adversarial testing, prioritization and remediation.
• Analyze vulnerabilities beyond scanner severity, considering exploitability, exposure, affected assets, mitigations and business impact.
• Partner with engineering teams to triage findings and close vulnerabilities within risk-based SLAs.
• Build automation for ingestion, deduplication, enrichment, prioritization, assignment, remediation tracking and reporting.
• Identify systemic patterns and work with engineering teams to fix root causes.
• Operate and improve SAST, SCA, secrets detection, container scanning, infrastructure scanning and external attack-surface monitoring.
• Validate findings through technical investigation and hands-on testing, and perform targeted security reviews of high-risk services.
• Integrate security controls into CI/CD and developer workflows with minimal friction.
• Develop metrics and reporting on vulnerability exposure, remediation performance and recurring classes.
• Integrate new security technologies, partner on incident response for active exploits, and evaluate and integrate new tools.

Required profile

• Strong application or product security fundamentals and hands-on vulnerability management experience.
• Understanding of common vulnerability classes and exploitation techniques across web apps, APIs, authentication, cloud services, containers and software supply chains.
• Ability to read and reason about code and work with software engineers on remediation.
• Experience with vulnerability scanning and tools such as SAST, SCA, DAST, secrets scanning, container scanning or CSPM.
• Comfortable investigating findings manually and automating workflows in Python, Go or similar languages.
• Experience integrating security tooling into CI/CD and working with Linux, Git, containers and cloud environments.
• Clear communication of security risk to security specialists and engineering teams.

Preferred qualifications

• Application security or security engineering background.
• Securing AI/ML platforms, inference services or large-scale compute infrastructure.
• AWS, Kubernetes, Docker and cloud-native environments; software supply-chain security.
• Threat modeling, penetration testing, external attack-surface management, vulnerability research, LLM/AI-assisted security tooling.