Application Security Engineer

Rubrik Security Cloud is hiring an Application Security Engineer in Palo Alto, CA (onsite). This role focuses on building preventative security controls that scale across development pipelines and AI-assisted development. You’ll help teams move faster with automation, trusted scanning, and guardrails that keep agent-generated code aligned with strong security standards.

What you’ll do

• Build and maintain preventative controls in development pipelines, including secrets prevention, dependency and artifact policy, and scan configuration as code.
• Partner with development teams with guidance from senior engineers to define what must be scanned, ensure scan policies are accurate, and make sure results are trusted.
• Help write security standards detailed enough to power automated checks that verify whether teams meet expectations.
• Ensure agent-generated code meets high security requirements by defining and implementing guardrails for AI coding agents.
• Support design reviews and threat modeling for applications, and help build tooling and internal platforms.
• Enable team scale through automation of repetitive tasks, standards validation, and review support.

Requirements

• BS or MS in Computer Science, Information Technology, or a related field, or equivalent experience.
• Ability to write and maintain tooling in Python and at least one of Go, TypeScript, or JavaScript.
• Working knowledge of CI/CD pipelines, including Buildkite, Jenkins, Git workflows, and containers.
• Basic grounding in application security: OWASP Top 10, threat modeling, secrets management, and software supply chain risk.
• Practical experience using AI tools such as Claude or Claude Code to build or automate real work, along with the judgment to check output before trusting it.
• Clear writing and speaking skills, plus a willingness to learn fast in a space that changes every few months.

Preferred qualifications

• Built an automation or AI-assisted workflow that replaced manual work, and can explain how output correctness was verified (Claude skills, agents, and MCP servers count).
• Set up or tested controls on an AI coding agent or assistant (permissions, sandboxing, hooks, tool restrictions), with examples of risks reduced such as prompt injection, excessive agency, data exfiltration, or a malicious MCP server.
• Written evals, test cases, or review checks that caught bad LLM output before it was used.
• Put security checks into CI/CD pipelines such as secrets scanning, SAST, SCA, or dependency and artifact policy.
• Working knowledge of AWS, GCP, or Azure.

Technologies you’ll work with

Python, Go, TypeScript, JavaScript, Buildkite, Jenkins, Git workflows, containers, OWASP Top 10, Claude, Claude Code, AI coding agents, CI/CD pipelines, secrets management.

What success looks like

• The controls you build or maintain are enforced in the pipeline and reported by the organization.
• The teams you support have accurate scan configuration with comprehensive coverage that matches the standard, with no unknown gaps.
• The standards you help write are backed by automated checks, so conformance is measured rather than self-attested.
• Agent-generated code is held to the same standards and controls as other code.
• Automated work eliminates repetitive manual tasks so team time shifts to higher-value activities.

Compensation: USD 124,200 to 186,200 per year.

Location: Palo Alto, CA (onsite).