Drimva

xAI

Application Security Engineer, X Money

$100K–$258K

Palo Alto, CA +7 · Full-time · Posted Sep 30, 2026

Location
Palo Alto, CA
Austin, TX
New York, NY
Washington, DC
Austin, TX
New York, NY
Palo Alto, CA
Washington, DC
Experience
3+ years in application security, with a focus on code security practices.
Education
Bachelor's degree in computer science, cybersecurity, or scientific discipline.
Visa sponsorship
Must be a U.S. citizen or national, U.S. lawful permanent resident, refugee, or asylee, or be eligible to obtain required authorizations from the U.S. Department of State.

About the job

Protects X Money payments and financial products by securing code, CI/CD pipelines, software supply chains, and systems handling customer funds.

What you'll do

  • Review code, model threats, assess risks, and guide vulnerability remediation for financial products.
  • Integrate security into development and CI/CD, manage the bug bounty program, and support application security incident response.
  • Secure software supply chains and build agentic and LLM-based solutions to detect, investigate, or prevent security problems.

What they ask for

  • Bachelor's degree in computer science, cybersecurity, or scientific discipline.
  • 3+ years of experience in application security, with a focus on code security practices.
  • Experience in payments, money transmission, digital wallets, or other financial platforms.

Nice to have

  • Proficiency in Python or Rust; experience securing CI/CD pipelines and implementing DevSecOps practices.
  • Experience with security testing and code analysis tools, financial transaction systems, agentic or LLM-based security solutions, AWS, bug bounty programs, or software supply chain security.

Pay

$100,000 - $258,000 USD (base salary)

Tools

Python, Rust, OWASP Top 10, Burp Suite, OWASP ZAP, AWS, GitOps, SBOMs

AI focus

Design and implement agentic and LLM-based solutions to help detect, investigate, or prevent security problems.

Model-written summary · the original posting is authoritative

First seen Oct 10, 2026 · Last verified Nov 5, 2026 (UTC)