Senior AI App Sec Engineer

Job not on LinkedIn

🔥 0 minutes ago

🇺🇸 United States – Remote

💵 $125.3k - $178.9k / year

⏰ Full Time

🟠 Senior

🤖 Artificial Intelligence

🦅 H1B Visa Sponsor

This company has sponsored H1B visas in the past.

👻 Ghost score 0%

What it means: the chance that no one is really hiring for this job.How to read it: 60% or higher means we think this is a ghost. Lower scores are less of a worry.How we score it: age, reposts, open roles vs team size, how fast jobs close, and whether pay is listed.Fine print: an estimate from public data, not a judgment of the company. Real jobs can score high, so treat it as a hint, not a fact.

Apply Now

Find Similar Remote Jobs

Cardinal Health

WebsiteLinkedInAll Job Openings

10,000+ employees

Founded 1971

📦 Logistics

🏭 Manufacturing

🏥 Healthcare

💰 $78M Post-IPO Debt on 2006-08

Logistics • Manufacturing • Healthcare

Cardinal Health is a global healthcare services and products company. It provides a comprehensive range of healthcare services, including medical supply distribution, pharmaceutical distribution, and logistics solutions to various healthcare facilities such as hospitals, community health centers, and ambulatory surgery centers. Additionally, Cardinal Health offers a variety of medical products and pharmaceutical services. The company also focuses on innovative solutions to enhance healthcare delivery, through services like patient support, pharmacy management, and advanced therapy solutions. Cardinal Health is committed to supporting healthcare providers in delivering quality patient care while optimizing operational efficiency.

📋 Description

• Design, build, and test prototypes and production-ready capabilities using generative AI, large language models, AI agents, and multi-step agentic workflows • Develop Python-based services, automation, integrations, evaluation harnesses, and supporting tools for Application Security use cases • Evaluate AI-enabled security products and frameworks for vulnerability discovery, exploitability analysis, secure code guidance, remediation, validation, and developer workflow integration • Create controlled workflows for AI to analyze code, use approved tools, recommend or generate changes, execute tests, and produce auditable evidence with human oversight • Establish technical guardrails for agent identity, least privilege, data access, tool use, repository access, secrets handling, logging, traceability, change control, and safe failure or termination • Develop test plans and benchmarks for accuracy, security, reliability, repeatability, cost, latency, false positives, remediation quality, and operational value • Perform security testing of AI and agentic workflows, including prompt injection, unsafe tool use, excessive agency, data leakage, insecure output handling, dependency and supply chain risks, and authorization failures • Integrate capabilities with source control, CI/CD pipelines, developer tools, issue management, security testing platforms, and vulnerability management workflows • Define reference architectures, reusable patterns, technical requirements, runbooks, and operational support models • Partner with governance and architecture teams on enterprise AI, security, privacy, data protection, and technology standards • Support application-team pilots, capture feedback, measure outcomes, and recommend whether capabilities should be scaled, redesigned, purchased, built, or retired • Maintain awareness of developments in generative AI, agentic systems, secure AI engineering, Application Security, and software delivery practices • Lead or materially contribute to complex projects with broad scope and significant technical impact • Recommend new practices, architectures, controls, metrics, and engineering approaches • Mentor and provide technical resources to less experienced colleagues and cross-functional partners • Communicate technical findings, risks, trade-offs, and recommendations to engineering, security, governance, and leadership forums

🎯 Requirements

• Bachelor's degree in computer science, software engineering, cybersecurity, information systems, or a related field, or equivalent practical experience • Substantial experience in software engineering, security engineering, Application Security, DevSecOps, or a closely related technical discipline • Demonstrated proficiency developing solutions in Python • Demonstrated understanding of Application Security concepts and secure software development practices • Experience delivering complex technical work with limited definition and coordinating across multiple stakeholder groups • Hands-on experience with generative AI application development, LLM integration, agentic systems, or AI-enabled developer tooling • Experience with one or more additional languages or platforms such as Java, JavaScript/TypeScript, .NET/C#, or Go • Experience with cloud services, containers, Kubernetes, infrastructure as code, and enterprise developer platforms • Experience with AI evaluation, adversarial testing, red teaming, observability, or governance controls for AI-enabled systems • Knowledge of OWASP Top 10, OWASP guidance for LLM or agentic applications, NIST Secure Software Development Framework, and NIST AI Risk Management Framework • Strong hands-on Python development experience, including API integration, automation, testing, data handling, and production-quality engineering practices • Experience building or integrating solutions using large language models, model APIs, retrieval-augmented generation, tool calling, structured outputs, workflow orchestration, or agent frameworks • Experience designing and evaluating agentic workflows that use tools, maintain state, make bounded decisions, and operate with human approval where appropriate • Strong understanding of secure software development, common application vulnerabilities, threat modeling, secure design, authentication and authorization, secrets management, and software supply chain risk • Experience with Application Security capabilities such as SAST, SCA, secrets detection, DAST, API security, container security, IaC security, and vulnerability remediation workflows • Experience with Git-based development, pull requests, CI/CD, automated testing, containers, Kubernetes, and cloud-native development patterns • Ability to evaluate AI output quality using repeatable test cases, metrics, red-team scenarios, and evidence-based comparison • Understanding of AI security risks and controls, including prompt injection, data leakage, excessive agency, insecure tool use, model and dependency supply chain risk, and auditability • Strong problem-solving, technical writing, presentation, and cross-functional collaboration skills • Ability to move between experimental engineering and enterprise operationalization while maintaining maintainability, governance, cost, and support requirements • Relevant security, cloud, or software credentials are beneficial but not required

🏖️ Benefits

• Medical, dental and vision coverage • Paid time off plan • Health savings account (HSA) • 401k savings plan • Access to wages before pay day with myFlexPay • Flexible spending accounts (FSAs) • Short- and long-term disability coverage • Work-Life resources • Paid parental leave • Healthy lifestyle programs • Bonus eligible

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume