Title: AI-Assisted Vulnerability Testing Developer
Location: Remote
Key Responsibilities
- Collaborate with security and engineering teams to evaluate and implement AI-assisted vulnerability testing solutions
- Identify and assess viable tools and integrations, including:
- AWS Security tools (static and penetration testing capabilities)
- Burp Suite (manual and dynamic testing coverage)
- Snyk (vulnerability analysis, reachability testing)
- GitHub Actions / GitHub Advanced Security
- Design and execute Proof of Concept (POC) efforts to validate AI-assisted testing approaches
- Enable and configure selected solutions within development and CI/CD environments
- Drive the transition from POC to production-ready implementation
Define and establish governance frameworks, including:
- Training and enablement plans
- Documentation and standards
- Security scope and coverage
- Support go-live execution, ensuring successful adoption across engineering pipelines
- Develop a 2027 roadmap for pipeline integration, including scope definition and implementation planning
- Assist with post-POC scaling and optimization efforts, ensuring long-term sustainability
- Support licensing strategy, token usage, and funding considerations for AI-enabled security tools
Required Qualifications
- 5+ years of experience in application security, DevSecOps, or secure software development
- Hands-on experience with:
- Application security testing tools (SAST, DAST, SCA)
- CI/CD pipeline integrations (e.g., GitHub Actions, Jenkins, etc.)
- Familiarity with AI/ML-assisted development or security tools, including large language model (LLM)-driven workflows
- Experience working with cloud security tools, preferably within AWS environments