Application Security Engineer, AI-Assisted Vulnerability Management
Posted 4ds ago
Employment Information
Report this job
Job expired or something wrong with this job?
Job Description
Application Security Engineer designing and operating AI-assisted vulnerability management workflows for Eclipse Foundation. Collaborating across open source projects to enhance security processes and outcomes.
Responsibilities:
- Design, build, and operate AI-assisted vulnerability management workflows across Eclipse Foundation open source projects
- Build pipelines and integrate AI-assisted analysis into developer and CI/CD workflows
- Evaluate findings critically and reduce false positives
- Collaborate with project maintainers to land real fixes
- Deliver measurable improvements in how the Foundation discovers, prioritizes, and resolves security issues
- Help define safe and appropriate use of AI tooling
- Produce internal playbooks, technical write-ups, and metrics dashboards
- Participate in vulnerability disclosure processes, CVE management, and security advisories as needed
Requirements:
- Degree in software engineering, computer science, cybersecurity, or a related field is welcome
- Equivalent practical experience is highly valued
- Strong application security background
- Familiarity with common vulnerability classes such as OWASP Top 10 and CWE
- Secure coding practices and practical exploitability analysis
- Hands-on experience conducting security code reviews, audits, or assessments using SAST, DAST, SCA, dependency scanning, or other code analysis tools
- Ability to build and integrate developer-facing tooling using languages such as Python, Java, TypeScript, or similar
- Practical experience applying LLMs or AI-assisted tools to code analysis, vulnerability research, developer productivity, or security automation
- Familiarity with open source development workflows, including Git, GitHub or GitLab, pull requests, issue tracking, and CI/CD
- Strong written communication skills, including the ability to write actionable security findings, advisories, issues, and remediation guidance for maintainers with varying security backgrounds.
Benefits:
- Friday flex-time
- Right-to-disconnect policy
- Corporate Recharge days
- Comprehensive benefits package


















