Application Security Engineer

Rubrik•Palo Alto, CA

About The Position

Rubrik’s Application Security team establishes security standards and builds controls so software is secure by design. The team covers software and automation that runs against Rubrik or customer data, including product code, IT tooling, data pipelines, low-code automation, and output from AI coding agents. Its focus is on reducing risk through design and prevention rather than finding vulnerabilities after the fact. The Application Security Engineer will work hands-on across standards, secure architecture and design, preventative controls, and adoption and enablement. The role owns defined pieces of this work with guidance from senior engineers, and success is measured by outcomes. The engineer will also automate repetitive work, using AI tools where useful, and will have opportunities to learn and grow in the field.

Requirements

Bachelor’s or master’s degree in Computer Science, Information Technology, or a related field, or equivalent experience.
Ability to write and maintain tooling in Python and at least one of Go, TypeScript, or JavaScript.
Working knowledge of CI/CD pipelines, Buildkite, Jenkins, Git workflows, and containers.
Basic grounding in application security, including OWASP Top 10, threat modeling, secrets management, and software supply-chain risk.
Practical experience using AI tools such as Claude or Claude Code to build or automate real work, and sound judgment in checking their output before relying on it.
Clear written and verbal communication skills and willingness to learn quickly in a changing field.

Nice To Haves

Built an automation or AI-assisted workflow that replaced manual work, and can explain how its output was validated; Claude skills, agents, and MCP servers count.
Set up or tested controls on an AI coding agent or assistant, such as permissions, sandboxing, hooks, or tool restrictions, and can explain the risks they reduced.
Written evaluations, test cases, or review checks that caught incorrect LLM output before use.
Added a security check to a CI/CD pipeline, such as secrets scanning, SAST, SCA, or dependency and artifact policy.
Working knowledge of AWS, GCP, or Azure.

Responsibilities

Build and maintain preventative development-pipeline controls, including secrets prevention, dependency and artifact policy, and scan configuration as code.
Work with development teams, with guidance from senior engineers, to determine what needs to be scanned and ensure scan policies are accurate and results are trustworthy.
Help write testable security standards and build automated checks to measure conformance.
Define and implement guardrails so agent-generated code meets the same security standards and controls as other code.
Support design reviews and threat modeling for applications, build tooling, and internal platforms.
Automate repetitive tasks, standards checks, and review support to help the team scale.