Application Security Engineer I

📋 Description

• Support threat modeling and security risk assessments for CarGurus applications and products
• Assist in training developers on secure coding, AI-assisted development, and secure SDLC practices
• Help triage, prioritize, assign, and track remediation of vulnerabilities
• Contribute to the operation and improvement of code and infrastructure scanning tools and policies
• Assist in investigations involving application security issues
• Partner with development teams and senior security engineers to help design and implement security

🎯 Requirements

• 0 to 2 years of experience in cybersecurity, application security, software engineering, or a
• Internship, co-op, academic, or hands-on project experience in security or software development is
• Interest in leveraging modern technologies, including AI and ML, to improve security outcomes
• Familiarity with application security concepts such as secure coding, vulnerability management
• Familiarity with cloud infrastructure and technologies such as AWS, Kubernetes, containers, or
• Familiarity with standard SDLC processes and engineering tools such as GitHub and CI/CD automation

🎁 Benefits

• Equity for all employees
• Flexible hybrid work model
• Robust time-off policies and work-life balance
• Daily free lunch, commuting cost coverage, and various wellness perks
• Support for in-person interviews where applicable