Base Career helps you apply smarter for this job.
Key skills for this role
Are you ready to shape the future of work at the intersection of human expertise and AI innovation? At Cvent, we’re committed to continuous learning and adaptation—AI isn’t just a tool for us, it’s part of our DNA. We’re looking for candidates who are eager to evolve alongside technology. If you love to experiment boldly, share your discoveries, and help define best practices for AI-augmented work, you’ll thrive here. Our team values professionals who thoughtfully integrate AI into their daily work, delivering exceptional results while relying on the human judgment and creativity that drive real innovation
Throughout our interview process, you’ll have the chance to demonstrate how you use AI to learn, iterate, and amplify your impact. If you’re excited to be part of a team that’s leading the way in AI-powered collaboration, we’d love to meet you.
Recruitment Scam Notice: Beware of recruitment scams. Legitimate Cvent recruiting communications will come from accounts formatted as “ name@cvent.com ” email address. Cvent will never request payment or ask for sensitive personal or financial information through chat or social media platforms. Cvent is not responsible for losses or damages arising from communications, payments, or disclosures made to third parties impersonating Cvent.
If you believe a communication may be fraudulent, we strongly recommend that you don't respond and report the incident at recruitingindia@cvent.com .
For more information, visit Cvent’s Recruitment Fraud Notice. https://www.cvent.com/en/notice-recruitment-fraud .
Who are you? You're a hands-on Application Security Engineer who is energized by the intersection of security and AI. You like to build, not just review — you write automation, wire up agents, and turn repetitive security work into self-serve tooling that developers actually use. You're comfortable across the core of AppSec (threat modeling, secure design and code review, penetration testing, vulnerability remediation) and you bring a builder's mindset that multiplies your impact. You're looking to grow your technical depth while contributing to a security program that treats AI as a first-class engineering capability, not an afterthought. You're required to be in the office 2 days/week.
Build and maintain AI-powered security automation — agents, skills, and pipelines that automate threat modeling, vulnerability triage, finding deduplication, and report generation across diverse tech stacks.
Skip the repetitive application forms
Install the Base Career Chrome Extension and autofill job applications across major job boards with your profile.
Trusted by over 500,000 job seekers on Base Career
More from this employer
Gurugram, IND
Cvent is seeking an Engineering Manager to lead the design, development, deployment, and operation of scalable web applications and services. The role requires extensive Java and software development experience, technica
London, GBR
, USA
Gurugram, IND
Gurugram, IND
Tysons, USA
London, GBR
Tysons, USA
Gurugram, IND
Tysons, USA
, USA
Develop and extend agentic workflows that integrate LLMs into security tooling through APIs and MCP (Model Context Protocol) connectors to systems like Jira, Confluence, and cloud security platforms.
Integrate and run security tooling across the SDLC — embedding SAST, DAST, and SCA into CI/CD pipelines and improving signal quality with AI-assisted triage.
Perform threat modeling, secure code and design reviews, and targeted penetration testing for new and existing features, including cloud-native, GenAI, and AI/ML systems.
Apply AI security frameworks in practice — OWASP LLM Top 10, OWASP AI Testing Guide, and MITRE ATLAS — to assess prompt injection, model abuse, data exposure, and agent-misuse risks.
Write internal tools and scripts (Python, TypeScript, JavaScript, Bash) to automate security testing and governance, including support for cloud-native apps on AWS.
Partner with engineering teams to remediate vulnerabilities surfaced through scans, manual testing, or AI-assisted analysis, and clearly communicate risk to technical audiences.
3–5 years of hands-on experience in application security or secure software development.
Solid scripting/programming skills — able to automate tasks and build internal tools in Python, JavaScript/TypeScript, or Bash.
Working experience integrating security tools into CI/CD pipelines and the SDLC.
Familiarity with at least one major cloud platform (AWS preferred; GCP or Azure acceptable) and cloud-native security principles.
Proficiency with common security testing and cloud security tools (e.g., Burp Suite, Checkmarx, Mend, Veracode, ZAP, Wiz).
Strong grasp of AppSec fundamentals — OWASP Top 10, CWE, secure coding practices, and common web/API vulnerability classes. This is the hard floor for the role.
Exposure to LLMs and AI agents and a genuine drive to build with them — you've experimented with AI tooling and want to do it professionally. You do not need to have shipped production AI tooling; that's what you'll grow into here.
Hands-on experience building with LLM APIs, AI agents, or automation frameworks (e.g., Claude, MCP, function/tool calling), or exposure to securing AI/ML and GenAI features.
DevSecOps, IaC security, or supply-chain experience, and relevant certifications (e.g., AWS Security – Specialty, OSCP, GWAPT)
You'll build AI-driven security automation that scales across hundreds of apps and services and see it adopted by real developers.
You'll join the ASRE team and grow your skills at the leading edge of AI-assisted Application Security.
You'll work alongside engineers who take security seriously and give you the room to ship and iterate.
You'll have a clear runway to grow into a Senior role as your technical depth and ownership expand.
Provides software for meetings, events, and hospitality.
Visit company websiteJobs and hiring trendsFull-time
Mid · 3+ years experience
Hybrid
Apply faster on company sites with our extension.