(USA) Staff, Application Security Engineer

Position Summary

We are expanding our team and looking for technologists with experience in Application Security, Machine Learning, and a passion for Artificial Intelligence. This role is geared for an individual contributor who can lead within, someone who enjoys the challenges of building enterprise capabilities, establishing strategy and best practices for AI-assisted development, and assessing risks and developing comparison metrics for AI-generated contributions.

What you'll do

• Develop Application Security strategy for AI-assisted development across SDLC and CI/CD.
• Establish architecture patterns for safe use of AI coding assistants (IDE, CLI, PR bots) including data-handling and model interaction boundaries.
• Champion AI security controls that are developer-first, fast, and low-friction, while ensuring enterprise policy adherence.
• Quantify defect rates and risk between human vs. AI-generated changes.
• Author secure coding standards for AI-generated code and drive adoption, measuring enforcement and telemetry.
• Assess risks of AI code contributions and codify automated checks.
• Orchestrate security tools and connect findings to AI remediation workflows.
• Pre-train and fine-tune enterprise AI coding agents on secure patterns, org policies, and vetted libraries to minimize insecure suggestions.
• Create developer blueprints and code recipes that embed secure defaults into AI scaffolding and templates.
• Mentor staff and partner teams; evangelizing AI-secure coding, prompt safety, and pipeline guiding principles.

Benefits

• Competitive pay
• Performance-based bonus awards
• Health benefits: medical, vision, and dental coverage
• Financial benefits: 401(k), stock purchase, and company-paid life insurance
• Paid time off benefits: PTO (including sick leave), parental leave, family care leave, bereavement, jury duty, and voting
• Other benefits: short-term and long-term disability, company discounts, military leave pay, adoption and surrogacy expense reimbursement, and more

Minimum Qualifications

• Outlined below are the required minimum qualifications for this position. If none are listed, there are no minimum qualifications.
• Option 1: Bachelor's degree in computer science, information technology, engineering, information systems, cybersecurity, or related area and 4 years' experience in application security, or related area at a technology, retail, or data-driven company.
• Option 2: 6 years' experience in application security, or related area at a technology, retail, or data-driven company.

Preferred Qualifications

• Outlined below are the optional preferred qualifications for this position. If none are listed, there are no preferred qualifications.
• Certification in Security+, GISF, CISSP, CSSP, CASE, or GWEB
• Master’s degree in Computer Science, Information Technology, Engineering, Information Systems, Cybersecurity, or related area and 2 years' experience leading information security or cybersecurity projects
• We value candidates with a background in creating inclusive digital experiences, demonstrating knowledge in implementing Web Content Accessibility Guidelines (WCAG) 2.2 AA standards, assistive technologies, and integrating digital accessibility seamlessly.

Additional Compensation

• Annual or quarterly performance bonuses
• Stock

Location

Bentonville, Arkansas US-09050: The annual salary range for this position is $110,000.00 - $220,000.00
Herndon, Virginia US-10710: The annual salary range for this position is $132,000.00 - $264,000.00