{"id":3975222,"url":"https://alion.io/job/rubrik-application-security-engineer","title":"Application Security Engineer","company":{"id":1145,"name":"Rubrik","domain":"rubrik.com","url":"https://alion.io/company/rubrik","size_band":null,"is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Greenhouse","truth_index":{"grade":"A","score":86,"open_postings":21,"ghost_share":0,"stale_share":0.571,"repost_share":0,"time_to_fill_p50_days":47,"computed_at":"2026-11-09T06:03:00Z"}},"role":"Security","role_family":"Security","seniority":null,"employment_type":null,"work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Palo Alto, United States"],"countries":["US"],"hiring_countries":[],"hiring_countries_total":0,"salary":{"min":124200,"max":186200,"currency":"USD","period":"year","gross":null,"usd_annual":186200},"salary_estimate":null,"experience_years_min":null,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"Buildkite","optional":false},{"name":"CI/CD","optional":false},{"name":"Claude","optional":false},{"name":"Claude Code","optional":false},{"name":"Git","optional":false},{"name":"JavaScript","optional":false},{"name":"Jenkins","optional":false},{"name":"LLM Guardrails","optional":false},{"name":"OWASP Top 10","optional":false},{"name":"Python","optional":false},{"name":"Threat Modeling","optional":false},{"name":"TypeScript","optional":false},{"name":"AWS","optional":true},{"name":"Azure","optional":true},{"name":"GCP","optional":true},{"name":"LLM","optional":true},{"name":"Model Context Protocol","optional":true}],"status":"live","first_seen_at":"2026-11-09T17:34:04Z","employer_posted_date":"2026-11-09","last_verified_at":"2026-11-09T17:46:23Z","board_verified":true,"closed_at":null,"days_open":0,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":0},"description":"About the team:\nThe Application Security team believes software should be secure because of how it was built, not because someone checked it afterwards. We set the security standards that everything Rubrik builds has to meet, and we build the controls that make those standards the default. We cover any team that builds, generates, or assembles software or automation that runs against Rubrik or customer data. That includes Engineering product code, IT-built tooling, data pipelines, low-code automation, and anything produced by AI coding agents. Other teams handle triaging vulnerabilities and chasing remediation. Our measure of success is the risk we eliminate by design, not the number of vulnerabilities found later.\nAbout the role:\nYou will do hands-on work across our four focus areas: Standards, Secure Architecture and Design, Preventative Controls, Adoption and Enablement. You will own defined pieces of this work, with guidance from senior engineers, and you will be measured on the outcomes below rather than on activity. The team is small, so you will also be expected to automate repetitive work, using AI tools where they help. You are not expected to know all of this on day one. We are looking for people who have started working in this space and want to learn and grow at speed.\nWhat you'll do:\nBuild and maintain the preventative controls in development pipelines, including secrets prevention, dependency and artifact policy, and scan configuration as code. \nWith guidance from senior engineers, work with development teams to establish what needs to be scanned, ensure accurate scans policies and that the results can be trusted. \nHelp write security standards specific enough to test and build the automated checks that show whether teams conform to them. \nEnsure agent-generated code conforms to the highest security standards and controls through defining and implementing guardrails for AI coding agents.\nSupport design reviews and threat modeling for applications, build tooling and internal platforms.\nEnable the team to scale at speed through automation of repetitive tasks, standards checks and review support.\nWhat Success Looks Like:\nBy the end of your first year, we would expect:\nThe controls you built or maintain are enforced in the pipeline and reported by organization.\nThe teams you worked with have accurate scan configuration, comprehensive coverage that matches the standard, with no unknown gaps.\nThe standards you helped write have automated checks, so conformance is measured and not self-attested.\nAgent-generated code is covered by the same standards and controls as other code.\nThe repetitive team work you automated no longer needs manual effort, and the team's time has moved to higher-value work.\nExperience you'll need:\nBS or MS in Computer Science, Information Technology, or a related field, or equivalent experience.\nCan write and maintain tooling in Python and at least one of Go, TypeScript, or JavaScript.\nWorking knowledge of CI/CD pipelines, Buildkite, Jenkins, Git workflows, and containers.\nBasic grounding in application security: OWASP Top 10, threat modeling, secrets management, and software supply chain risk.\nPractical experience using AI tools such as Claude or Claude Code to build or automate real work, and the judgment to check the output before trusting it.\nClear writing and speaking, and a willingness to learn fast in an area that changes every few months.\nPreferred qualifications:\nYou have built an automation or AI-assisted workflow that replaced manual work and you can explain how you checked that its output was right. Claude skills, agents and MCP servers count.\nYou have set up or tested controls on an AI coding agent or assistant (permissions, sandboxing, hooks, tool restrictions), and you can describe the risk each one reduced, such as prompt injection, excessive agency, data exfiltration, or a malicious MCP server.\nYou have written evals, test cases, or review checks that caught bad LLM output before it was used.\nYou have put a security check into a CI/CD pipeline (secrets scanning, SAST, SCA, or dependency and artifact policy).\nWorking knowledge of AWS, GCP, or Azure.\nThe minimum and maximum base salaries for this role are posted below; additionally, the role is eligible for bonus potential, equity and benefits. The range displayed reflects the minimum and maximum target for new hire salaries for the role based on U.S. location. Within the range, the salary offered will be determined by work location and additional factors, including job-related skills, experience, and relevant education or training.\nUS Pay Range\n$124,200—$186,200 USD\nJoin Us in Securing and Accelerating the World's AI Transformation\nRubrik (NYSE: RBRK) is the Security and AI Operations Company, delivering one platform built at the intersection of data, identity, and AI. The platform enables agentic cyber resilience and trusted AI operations for enterprises worldwide, built to recover before disruption strikes and stay a step ahead, so security is never the reason ambition stalls.\nLinkedin | X (formerly Twitter) | Instagram | Rubrik.com\nInclusion @ Rubrik\nAt Rubrik, we are dedicated to fostering a culture where people from all backgrounds are valued, feel they belong, and believe they can succeed. Our commitment to inclusion is at the heart of our mission to secure the world’s data.\nOur goal is to hire and promote the best talent, regardless of background. We continually review our hiring practices to ensure fairness and strive to create an environment where every employee has equal access to opportunities for growth and excellence. We believe in empowering everyone to bring their authentic selves to work and achieve their fullest potential.\nOur inclusion strategy focuses on three core areas of our business and culture:\nOur Company: We are committed to building a merit-based organization that offers equal access to growth and success for all employees globally. Your potential is limitless here.\n\nOur Culture: We strive to create an inclusive atmosphere where individuals from all backgrounds feel a strong sense of belonging, can thrive, and do their best work. Your contributions help us innovate and break boundaries.\n\nOur Communities: We are dedicated to expanding our engagement with the communities we operate in, creating opportunities for underrepresented talent and driving greater innovation for our clients. Your impact extends beyond Rubrik, contributing to safer and stronger communities.\n\nEqual Opportunity Employer/Veterans/Disabled\nRubrik is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, age, disability, genetic information, protected veteran status, or any other status protected by applicable law. Rubrik provides equal employment opportunities to employees and applicants in all terms and conditions of employment, including recruiting, hiring, promotion, compensation, training, leave, and termination.\nRubrik provides reasonable accommodations to qualified applicants and employees with disabilities in accordance with applicable law. If you need an accommodation to participate in the application process or to perform your job, please contact . Accommodations may include changes to the application process, documents in an alternate format, a sign language interpreter, or specialized equipment.\nEEO IS THE LAW\nNOTIFICATION OF EMPLOYEE RIGHTS UNDER FEDERAL LABOR LAWS","description_format":"text","description_chars":7561,"description_truncated":false,"requirements":{"experience_years_min":null,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":{"level":"bachelor","optional":false},"security_clearance":false,"languages":[]},"benefits":["Equity"],"hiring_locations":[{"name":"United States","iso":"US","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Application Security","Cloud Security","Backup & Disaster Recovery"],"lifecycle":[{"event":"open","at":"2026-11-09T17:46:23Z"}],"visa":[{"country":"US","licensed_sponsor":true,"adverts_offering_sponsorship_24m":0,"sanctioned_now":false,"evidence":"H-1B filings in 12 months: 113 · green card filings: 25","filings_12m":113,"filings_prev_12m":117,"green_card_filings_12m":25,"median_offered_wage_usd":191594,"route":null,"cap_exempt":false,"checked_at":"2026-11-09T07:32:21+00:00","sources":["US Department of Labor: LCA disclosure data (H-1B, H-1B1, E-3)","US Department of Labor: PERM disclosure data (green cards)"],"filings_for_role_12m":0}],"liveness":{"score":86,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.86,"p_room":1,"age_days":0,"expected_fill_days":47,"reasons":["conf:0","win:early","comp:brand"],"computed_at":"2026-11-09T18:25:43Z"},"pay":{"stated_usd_annual":186200,"is_top_pay":true},"html_url":"https://alion.io/job/rubrik-application-security-engineer","json_url":"https://alion.io/job/rubrik-application-security-engineer.json","meta":{"generated_at":"2026-11-09T18:25:43Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":3069,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-10T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.1,"usd":0.01,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":1145},"rest":"https://alion.io/mcp/rest/get_company?id=1145"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Frubrik-application-security-engineer"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":2,"usd":0.2},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Frubrik-application-security-engineer"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.1,"usd":0.01},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Frubrik-application-security-engineer"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/rubrik-application-security-engineer\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Frubrik-application-security-engineer"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":3975222}},{"tool":"search_jobs","arguments":{"company":"rubrik.com","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":3975222},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}