Application Security Engineer

About the role

Cerebras Systems builds the world's largest AI chip, 56 times larger than GPUs. This architecture allows Cerebras to deliver industry-leading training and inference speeds; over 10 times faster than GPU-based hyperscale cloud inference services.

This order of magnitude increase in speed is transforming the user experience of AI applications, unlocking real-time iteration and increasing intelligence via additional agentic computation.

Cerebras works with the leading model labs, global enterprises, and cutting-edge AI-native startups. OpenAI recently announced a multi-year partnership https://openai.com/index/cerebras-partnership/ with Cerebras, to deploy 750 megawatts of scale, transforming key workloads with ultra high-speed inference.

We are looking for an Application Security Engineer with a strong focus on Vulnerability Management to help secure Cerebras software, infrastructure, and AI platforms.

You will own and evolve key parts of our vulnerability management program from vulnerability discovery and risk prioritization through remediation and verification. This is not a ticket-management role. We are looking for an engineer who can understand vulnerabilities in context, work directly with engineering teams, automate repetitive security work, and help eliminate classes of vulnerabilities rather than simply track individual findings.

You will work closely with Engineering, Infrastructure, and IT teams to identify vulnerabilities across our products and environments and drive them to meaningful remediation.

RESPONSIBILITIES

- Own and continuously improve vulnerability management across applications, software dependencies, containers, operating systems, cloud infrastructure, and externally exposed services.

- Use AI agents and advanced security models to augment vulnerability discovery, code analysis, adversarial testing, prioritization, and remediation.

- Analyze vulnerabilities beyond scanner severity by considering exploitability, exposure, affected assets, available mitigations, and business impact.

- Partner directly with engineering teams to triage findings, determine appropriate remediation, and drive vulnerabilities to closure within risk-based SLAs.

- Build automation for vulnerability ingestion, deduplication, enrichment, prioritization, assignment, remediation tracking, and reporting.

- Identify systemic vulnerability patterns and work with engineering teams to address root causes rather than repeatedly fixing individual findings.

- Operate and improve application security capabilities including SAST, SCA, secrets detection, container scanning, infrastructure scanning, and external attack-surface monitoring.

- Validate security findings through technical investigation and hands-on testing, distinguishing exploitable vulnerabilities from false positives and low-risk findings.

- Perform targeted application security reviews and testing for high-risk services and features.