AI-Powered Security Testing & Enhanced Vulnerability Identification Specialist

Job Summary

CrossCountry is seeking a security engineering professional to leverage advanced AI models and automated security testing capabilities to improve application security and vulnerability management. The role focuses on continuously identifying vulnerabilities across codebases, validating and prioritizing findings, conducting attack-path analysis, and integrating security findings with vulnerability management processes to drive effective remediation.

The ideal candidate will have a strong application security and vulnerability management background, combined with an understanding of AI-assisted security testing and emerging autonomous security analysis capabilities.

Key Responsibilities

• Implement and enhance AI-powered application security testing and vulnerability identification workflows.
• Leverage advanced AI models to analyze codebases and identify potential security weaknesses.
• Support continuous and automated code scanning and security analysis.
• Integrate vulnerability findings with vulnerability management systems and remediation workflows.
• Analyze Common Vulnerabilities and Exposures (CVEs), including severity, exploitability, and potential business impact.
• Conduct attack-path analysis to understand how vulnerabilities could be chained or exploited.
• Validate and prioritize findings to reduce false positives and focus remediation efforts.
• Collaborate with application security, product security, software engineering, and vulnerability management teams.
• Operationalize vulnerability remediation by defining workflows, ownership, prioritization, and tracking.
• Improve security testing coverage, reporting, and remediation effectiveness.
• Evaluate opportunities to use AI and automation to accelerate security assessment and vulnerability triage.

Required Qualifications

• 7–10 years of relevant experience in application security, product security, security engineering, or vulnerability management preferred.
• Strong understanding of application security testing and software vulnerabilities.
• Experience with vulnerability identification, prioritization, and remediation processes.
• Familiarity with CVEs, vulnerability severity scoring, and attack-path analysis.
• Understanding of secure software development practices and code security analysis.
• Strong technical communication, analytical, and problem-solving skills.
• Ability to work independently in fast-paced, technically complex environments.

Preferred Qualifications

• Hands-on exposure to AI-assisted security testing, AI-driven code analysis, or autonomous security tools.
• Experience with Static Application Security Testing (SAST), Dynamic Application Security Testing (DAST), Software Composition Analysis (SCA), or related AppSec tools.
• Familiarity with Common Vulnerability Scoring System (CVSS), Common Weakness Enumeration (CWE), and software supply-chain security.
• Experience integrating security tools with vulnerability management and issue-tracking platforms.
• Knowledge of AI/LLM security, automated penetration testing, or AI-assisted vulnerability research.