Job Closed
This listing is no longer active.
The Community for Open Innovation and Collaboration
Application Security Engineer, AI-Assisted Vulnerability Management
Location
Canada
Posted
86 days ago
Salary
0
Seniority
Senior
Job Description
Application Security Engineer, AI-Assisted Vulnerability Management
Eclipse Foundation
• Design, build, and operate AI-assisted vulnerability management workflows across Eclipse Foundation open source projects • Build pipelines and integrate AI-assisted analysis into developer and CI/CD workflows • Evaluate findings critically and reduce false positives • Collaborate with project maintainers to land real fixes • Deliver measurable improvements in how the Foundation discovers, prioritizes, and resolves security issues • Help define safe and appropriate use of AI tooling • Produce internal playbooks, technical write-ups, and metrics dashboards • Participate in vulnerability disclosure processes, CVE management, and security advisories as needed
Job Requirements
- Degree in software engineering, computer science, cybersecurity, or a related field is welcome
- Equivalent practical experience is highly valued
- Strong application security background
- Familiarity with common vulnerability classes such as OWASP Top 10 and CWE
- Secure coding practices and practical exploitability analysis
- Hands-on experience conducting security code reviews, audits, or assessments using SAST, DAST, SCA, dependency scanning, or other code analysis tools
- Ability to build and integrate developer-facing tooling using languages such as Python, Java, TypeScript, or similar
- Practical experience applying LLMs or AI-assisted tools to code analysis, vulnerability research, developer productivity, or security automation
- Familiarity with open source development workflows, including Git, GitHub or GitLab, pull requests, issue tracking, and CI/CD
- Strong written communication skills, including the ability to write actionable security findings, advisories, issues, and remediation guidance for maintainers with varying security backgrounds.
Benefits
- Friday flex-time
- Right-to-disconnect policy
- Corporate Recharge days
- Comprehensive benefits package
Related Guides
Related Categories
Related Job Pages
More Application Engineer Jobs
Senior Engineer, Application Reliability Engineering
ComcastHeadquartered in Philadelphia, Pennsylvania, Comcast was established in 1963 as a single-system cable company. Over the years, Comcast experienced tremendous gr
Role Description Comcast Advertising is driving the TV advertising industry forward, from delivering ads to linear and digital audiences to pioneering the tech that makes it possible. We help brands connect with their audiences on every screen using advanced data, technology, and premium video content. Our media sales division helps local, regional, and national brands reach potential customers through multiscreen TV advertising. Our ad tech division FreeWheel provides comprehensive adtech that makes it easier to buy and sell premium video advertising across all screens, data types, and sales channels. Job Summary Job Description - Provide technical leadership within teams responsible for designing and developing new software and web applications using Mulesoft integration solutions including Mulesoft Anypoint Platform, Mule RTF, Mulesoft Anypoint Studio, Mule FlexGateway, and Mulesoft Integration. - Use the following AWS services: EC2, EKS, VPC, SQS, SNS, S3, RDS, and DynamoDB. - Use Azure Kubernetes Service (AKS). - Create and implement API solutions using API Gateways. - Use Kubernetes, Helm, and Terraform. - Use Cloud Networking and Security technologies including load balancers, Virtual Private Cloud (VPC), content delivery network (CDN), identity and access management (IAM), encryption, and firewalls. - Perform CI/CD using Concourse, Github Actions, and Argo CD. - Use ELK Stack, Grafana, and Prometheus for application monitoring. - Develop software using Python and Go. - Support applications under development and customize current applications. - Assist with the software update process for existing applications and roll-outs of software releases. - Analyze, test, and assist with the integration of new applications. - Document all development activity. - Research, write, and edit documentation and technical requirements, including software designs, evaluation plans, test results, technical manuals, and formal recommendations and reports. - Monitor and evaluate competitive applications and products. - Review literature, patents, and current practices relevant to the solution of assigned projects. - Collaborate with project stakeholders to identify product and technical requirements. - Conduct analysis to determine integration needs. - Work with the Quality Assurance team to determine if applications fit specification and technical requirements. - Guide and mentor junior-level engineers. Position is eligible for 100% remote work. Qualifications - Bachelor’s degree, or foreign equivalent, in Computer Science, Engineering, or related technical field. - Five (5) years of experience developing software using Mulesoft integration solutions including Mulesoft Anypoint Platform, Mule RTF, Mulesoft Anypoint Studio, Mule FlexGateway, and Mulesoft Integration. - Experience using AWS services: EC2, EKS, VPC, SQS, SNS, S3, RDS, and DynamoDB. - Experience using Azure Kubernetes Service (AKS). - Three (3) years of experience creating and implementing API solutions using API Gateways. - Experience using Kubernetes, Helm, and Terraform. - One (1) year of experience using Cloud Networking and Security technologies including load balancers, Virtual Private Cloud (VPC), content delivery network (CDN), identity and access management (IAM), encryption, and firewalls. - Experience performing CI/CD using Concourse, Github Actions, and Argo CD. - Experience using ELK Stack, Grafana, and Prometheus for application monitoring. - Experience developing software using Python and Go. Requirements - Azure Kubernetes Service (AKS) - Grafana - Virtual Private Cloud Benefits We believe that benefits should connect you to the support you need when it matters most, and should help you care for those who matter most. That's why we provide an array of options, expert guidance and always-on tools that are personalized to meet the needs of your reality—to help support you physically, financially and emotionally through the big milestones and in your everyday life. Please visit the benefits summary on our careers site for more details. Company Description Comcast is an equal opportunity workplace. We will consider all qualified applicants for employment without regard to race, color, religion, age, sex, sexual orientation, gender identity, national origin, disability, veteran status, genetic information, or any other basis protected by applicable law.
Applications Engineering Manager
KULR Technology Group, Inc (NYSE: KULR)Accelerating The Global Transition to a Sustainable Electrification Economy | San Diego, CA | Webster, TX |
• Serve as the primary technical interface for customers during pre-sales engagements, leading solution discussions and building technical credibility • Partner with Sales and Business Development to qualify opportunities, shape capture strategy, and support deal closure • Translate customer requirements into battery system, BMS, and thermal management solution architectures • Lead technical responses for RFIs, RFPs, and proposals, including compliance matrices, technical volumes, and solution justifications • Conduct design reviews, architecture trade studies, and technical presentations with customer engineering teams • Guide customer evaluations, demonstrations, and early prototype efforts to ensure successful solution adoption • Identify technical risks early in the sales cycle and coordinate mitigation strategies with internal engineering teams • Manage and mentor applications engineering staff, driving consistency in technical engagement, deliverables, and customer support quality
Principal Enterprise Applications Engineer
Port of PortlandAt the Port of Portland, we use everything we have – our three airports, three working marine terminals, six business parks, and all the resources, expertise, and experience behind them – to move with purpose, connecting people with powerful opportunities and creating value for our region. We know that every person we hire, business we work with, contract we sign and decision we make is a chance to make someone’s life better. And we’ll use our power and influence to unlock new opportunities and ensure more people share in our region’s success. With YOUR help – together with our partners, customers, and community – we’ll help drive meaningful change!
Role Description The Port of Portland is hiring a PRINCIPAL ENTERPRISE APPLICATIONS ENGINEER . This role serves as the Port’s senior technical authority for enterprise applications and integration, guiding platform strategy, ensuring secure and cohesive system behavior, and maintaining data reliability across the enterprise environment. Join us as the Principal Enterprise Applications Engineer and help shape the technical backbone of Port Forward — our multi-year modernization effort transforming how the Port operates. In this role, you’ll serve as the Port’s senior technical authority for enterprise applications, driving platform strategy, integration architecture, and data reliability across mission-critical systems. You’ll influence teams across the organization, elevate system cohesion, and bring scalable, modern solutions to life. If you want to make an enterprise-wide impact on a flagship transformation initiative, this is the place to do it. This is a Limited Duration role lasting approximately 24 – 36 months to assist the Port of Portland with an ERP implementation. The role may be lengthened or shortened based on business need. Qualifications - Six (6) + years of progressive experience in enterprise systems administration, engineering, or integration roles - Bachelor’s Degree – Information Technology, Computer Science, Business, or related Field, or a combination of related education and demonstrated experience - Master's Degree – preferred, not required - Ability to pass a criminal history records check to allow entry to secure airport areas (Grey Badge) - Clear credit check (due to access to sensitive financial information) Requirements - Enterprise application architecture and system design principles - Integration technologies including APIs, middleware, iPaaS platforms (e.g., Boomi), and event-driven architecture - Identity and Access Management (IAM), Single Sign-On (SSO), and security best practices - Software Development Life Cycle (SDLC) methodologies and release management practices - Data integration patterns, data quality controls, and reconciliation strategies across systems - Enterprise reporting and analytics ecosystems (e.g., data platforms, BI tools) - Disaster recovery, business continuity, and high-availability system design Company Description At the Port of Portland, we use everything we have – our three airports, three working marine terminals, six business parks, and all the resources, expertise, and experience behind them – to move with purpose, connecting people with powerful opportunities and creating value for our region. We know that every person we hire, business we work with, contract we sign and decision we make is a chance to make someone’s life better. And we’ll use our power and influence to unlock new opportunities and ensure more people share in our region’s success. With YOUR help – together with our partners, customers, and community – we’ll help drive meaningful change!
• Secure Development & Product Enablement • Integrate security into the software development lifecycle (SDLC) and CI/CD pipelines • Conduct code and dependency scanning using tools like SAST, DAST, and SCA • Perform security design reviews and architecture consultations • Define and implement security controls for AI-powered product features • Enable developers through secure coding guidance, training, and tooling • Mentor security champions across engineering teams to scale security expertise • Threat Detection & Response • Collaborate with other security engineers on threat detection and incident response • Support vulnerability triage and remediation across applications • Partner with Engineering and Product teams to embed secure-by-design practices • Perform post-incident reviews and drive remediation of root causes • Security Program Development • Lead product security assessments and coordinate remediation efforts • Contribute to the development of secure architecture patterns, standards and privacy-by-design guidelines • Help shape the future of application security as we scale and innovate • Ensure application security meets regulatory and customer compliance requirements (SOC 2, ISO 27001, HIPAA, GDPR, etc.) • Partner with Legal, Privacy, and Compliance teams to implement secure data handling and data protection practices • Metrics & Continuous Improvement • Define and track metrics (KPIs) to measure the effectiveness of the application security program, such as vulnerability remediation times and developer training coverage. • Report application security posture, risks, and trends to leadership



