Application Security Engineer

Rubrik Security Cloud is hiring an Application Security Engineer in Palo Alto, CA (onsite) to build preventative security controls across development pipelines and secure AI-assisted development.

Responsibilities

• Build and maintain preventative controls in development pipelines, including secrets prevention, dependency and artifact policy, and scan configuration as code.
• Partner with development teams (with guidance from senior engineers) to define what should be scanned, ensure scan policies are accurate, and help keep scan results trustworthy.
• Help author security standards detailed enough to support automated testing and evidence of conformance.
• Ensure agent-generated code meets the same high security expectations by defining and implementing guardrails for AI coding agents.
• Support design reviews and threat modeling for applications.
• Build tooling and internal platforms that enable faster, safer delivery.
• Scale team adoption through automation of repetitive tasks, standards checks, and review support.

Requirements

• BS or MS in Computer Science, Information Technology, or a related field, or equivalent experience.
• Ability to write and maintain tooling in Python and at least one of Go, TypeScript, or JavaScript.
• Working knowledge of CI/CD pipelines, including Buildkite and Jenkins, plus Git workflows and containers.
• Basic grounding in application security, including OWASP Top 10, threat modeling, secrets management, and software supply chain risk.
• Practical experience using AI tools such as Claude or Claude Code to build or automate real work.
• Judgment to evaluate and verify AI output before trusting it.
• Clear writing and speaking; willingness to learn quickly in a field that changes every few months.

Technologies

• Python, Go, TypeScript, JavaScript
• Buildkite, Jenkins
• Git workflows, containers
• CI/CD pipelines
• Secrets management
• OWASP Top 10
• Claude, Claude Code
• AI coding agents

Preferred Qualifications

• Built an automation or AI-assisted workflow that replaced manual work, including how you verified correctness (Claude skills, agents, and MCP servers count).
• Set up or tested controls on an AI coding agent or assistant (permissions, sandboxing, hooks, tool restrictions) and described risks reduced, such as prompt injection, excessive agency, data exfiltration, or malicious MCP server behavior.
• Wrote evals, test cases, or review checks that identified bad LLM output before it was used.
• Inserted security checks into a CI/CD pipeline, such as secrets scanning, SAST, SCA, or dependency and artifact policy enforcement.
• Working knowledge of AWS, GCP, or Azure.

What Success Looks Like

• Preventative controls built or maintained are enforced in the pipeline and reported at the organization level.
• Scan configuration and coverage match the standard, with no unknown gaps.
• Security standards are backed by automated checks, so conformance is measured rather than self-attested.
• Agent-generated code is covered by the same security standards and controls as other code.
• Automated work removes repetitive manual effort, shifting team time toward higher-value activities.

Salary: USD 124,200 - 186,200 per year.

Location: Palo Alto, CA (onsite).