Application Security Engineer securing GenAI products and emerging businesses. Building security tools, reviewing code, and improving application, cloud, and infrastructure security at Liftoff’s mobile marketing platform.
EF
Application Security Engineer, AI-Assisted Vulnerability Management
Posted 6 months ago
About the role
- Application Security Engineer designing and operating AI-assisted vulnerability management workflows for Eclipse Foundation. Collaborating across open source projects to enhance security processes and outcomes.
Responsibilities
- Design, build, and operate AI-assisted vulnerability management workflows across Eclipse Foundation open source projects
- Build pipelines and integrate AI-assisted analysis into developer and CI/CD workflows
- Evaluate findings critically and reduce false positives
- Collaborate with project maintainers to land real fixes
- Deliver measurable improvements in how the Foundation discovers, prioritizes, and resolves security issues
- Help define safe and appropriate use of AI tooling
- Produce internal playbooks, technical write-ups, and metrics dashboards
- Participate in vulnerability disclosure processes, CVE management, and security advisories as needed
Requirements
- Degree in software engineering, computer science, cybersecurity, or a related field is welcome
- Equivalent practical experience is highly valued
- Strong application security background
- Familiarity with common vulnerability classes such as OWASP Top 10 and CWE
- Secure coding practices and practical exploitability analysis
- Hands-on experience conducting security code reviews, audits, or assessments using SAST, DAST, SCA, dependency scanning, or other code analysis tools
- Ability to build and integrate developer-facing tooling using languages such as Python, Java, TypeScript, or similar
- Practical experience applying LLMs or AI-assisted tools to code analysis, vulnerability research, developer productivity, or security automation
- Familiarity with open source development workflows, including Git, GitHub or GitLab, pull requests, issue tracking, and CI/CD
- Strong written communication skills, including the ability to write actionable security findings, advisories, issues, and remediation guidance for maintainers with varying security backgrounds.
Benefits
- Friday flex-time
- Right-to-disconnect policy
- Corporate Recharge days
- Comprehensive benefits package
Job title
Job type
Experience level
Salary
Not specified
Degree requirement
Tech skills
Location requirements
Report this job
Found something wrong with the page? Please let us know by submitting a report below.
Application security leader strengthening Spring Financial’s Canadian fintech platforms. Driving secure development, cloud security, AI security, compliance, and incident response.
Technical application specialist supporting S&C’s electrical grid protection products and customers. Preparing proposals, coordinating orders, and applying medium - voltage protection engineering.
Application Security Engineer operating Newfold Digital’s AppSec scanning program for its global web technology products. Triaging vulnerabilities and partnering with engineering teams on remediation.
Senior engineer supporting Honeywell’s industrial automation and blending applications. Resolving customer issues, testing releases, training customers, and mentoring global support teams.
Vehicle Applications Engineer coordinating engineering requirements, bids, and bills of material for transit buses and coaches. Supporting production contracts and sales opportunities in Winnipeg.
Senior software engineer extending Auth0 and OpenFGA identity and authorization systems. Building secure permissions for human users and AI agents at Basis, a digital media automation platform.
Application Support Engineer supporting cryptocurrency trading systems and production environments. Handling incidents, releases, monitoring, automation, and L2/L3 technical support for global business users.
Senior Application Security Engineer embedding Secure by Design, threat modeling, and AI - assisted vulnerability remediation. Strengthening security for Lightspeed’s global cloud commerce platform serving merchants worldwide.
Applications Engineer developing technical and commercial quotations for Innomotics’ motors, VFDs, and drive systems. Supporting mining and heavy - industrial customers across Canada from proposal through execution.