xAI Application Security Engineer at xAI ensures security of cloud-native applications focusing on code security, CI/CD pipelines, and AI technologies. Responsibilities include code reviews, threat modeling, and securing software supply chains.
Responsibilities
Conduct in-depth code reviews and static analysis to identify and mitigate security vulnerabilities in our applications
Design and implement secure coding guidelines and best practices for development teams
Collaborate closely with development teams to integrate security practices throughout the CI/CD pipeline
Perform threat modeling and risk assessments for applications, developing mitigation strategies for potential risks
Manage vulnerability tracking and remediation efforts, providing guidance to development teams
Support incident response activities related to application security
Stay current on emerging security threats and trends in cloud-native technologies and AI, continuously enhancing our security measures
Evaluate and secure software supply chains, including producing and maintaining Software Bills of Materials (SBOMs)
Address security concerns specific to AI and machine learning models, with a focus on the OWASP LLM Top 10
Qualification
Bachelor's degree in computer scienceExperience with Python or RustExcellent communication skillsExperience with cloud platforms (eRelevant security certifications (e
Required
Bachelor's degree in computer science, cybersecurity, or scientific discipline
5+ years of experience in application security, with a focus on code security practices
Experience with Python or Rust, and secure coding practices in these languages
Preferred
Deep understanding of secure coding practices, application security frameworks, and common vulnerabilities (e.g., OWASP Top 10)
Understanding of AI/ML security implications, particularly those outlined in the OWASP LLM Top 10
Experience securing CI/CD pipelines and implementing DevSecOps practices
Familiarity with software supply chain security and SBOM generation tools
Experience with security testing tools (e.g., Burp Suite, OWASP ZAP) and static/dynamic code analysis
Excellent communication skills, able to explain complex security issues to both technical and non-technical audiences
Experience with cloud platforms (e.g., GCP, AWS, Azure) and their security features
