Build and maintain the preventative controls in development pipelines, including secrets prevention, dependency and artifact policy, and scan configuration as code.

With guidance from senior engineers, work with development teams to establish what needs to be scanned, ensure accurate scans policies and that the results can be trusted.

Help write security standards specific enough to test and build the automated checks that show whether teams conform to them.

Ensure agent-generated code conforms to the highest security standards and controls through defining and implementing guardrails for AI coding agents.

Support design reviews and threat modeling for applications, build tooling and internal platforms.

Enable the team to scale at speed through automation of repetitive tasks, standards checks and review support.

What Success Looks Like:

By the end of your first year, we would expect:

The controls you built or maintain are enforced in the pipeline and reported by organization.

The teams you worked with have accurate scan configuration, comprehensive coverage that matches the standard, with no unknown gaps.

The standards you helped write have automated checks, so conformance is measured and not self-attested.

Agent-generated code is covered by the same standards and controls as other code.

Application Security Engineer

Responsibilities

Qualification

Required

Preferred

Benefits

Company

Rubrik

More roles at Rubrik