AI AppSec Engineer

Description:

Fullpath by Cox Automotive is a fast-growing tech company in the automotive space with hubs across the US and Israel. We are disrupting the multi-trillion-dollar transportation industry with our advanced Customer Data Platform (CDP). Our work happens in the fast lane as we bring AI-powered, data-driven solutions to a quickly evolving industry.

Our team at Fullpath is made up of curious and creative individuals who are always looking to achieve the impossible. We are bold, collaborative, and goal-driven. At our core, we believe every voice has value and can impact our bottom line.

We are looking for an AI AppSec Engineer to join our team and make a real impact on our Secure Software Development Lifecycle! As an AI AppSec Engineer your mission will be to be the driving force behind our secure development lifecycle. You won’t just find bugs; you will help build the systems that prevent them. You will have the opportunity to help navigate the "Agentic Era" by building autonomous security guardrails, securing LLM-based workflows, and empowering developers to move fast without breaking security. You will also be responsible for working closely under the AppSec Architect.

This role is based out of our Tel-Aviv site and will report to the AppSec Architect 

• Build & automate: Develop and maintain internal security tooling, automated workflows, and AI security agents.
• Code integrity: Execute secure code reviews and provide actionable remediation guidance to engineering teams.
• Vulnerability management: Lead the tracking, triaging, and reporting of security flaws across all product lines.
• Best practice advocacy: Drive the adoption of secure coding standards, partnering with R&D and DevOps teams to embed security early and often.
• Extend our D&R capabilities: Build scalable solutions to identify malicious activity, triage alerts, and investigate and remediate incidents.
• Document: Draft requirement documents for security products and innovative technologies.

• 2-4 years experience as an Application Security Engineer or similar role from a Software Development Company
• In-depth knowledge in threat modeling, risk management, and security controls.
• Experience with AI Security and Security AI.
• Proficiency with OWASP Top 10: API, LLM, and Agentic applications.
• Hands-on competency integrating security tools such as SAST, DAST, SCA, and API security testing.
• Familiarity with CI/CD pipelines and Infrastructure as Code implementation.
• Practical background in software development and coding.
• In-depth knowledge of cloud technologies and cloud-native applications, AWS and GCP.
• Cybersecurity certifications such as OSCP, GPEN, CSSLP.