CarGurus
Application Security Engineer I
About this role
CarGurus seeks an Application Security Engineer I to join their Security Engineering team in Boston. This hands-on role focuses on securing applications and infrastructure through vulnerability management, code review support, and security control implementation for a cloud-first environment. Ideal for early-career security professionals eager to build technical expertise in a collaborative setting.
What you'll do
- Support threat modeling and security risk assessments for applications and products
- Assist developers with secure coding practices, AI-assisted development, and SDLC security
- Triage, prioritize, and track vulnerability remediation efforts
- Operate and improve code and infrastructure scanning tools and security policies
- Investigate application security issues and incidents
- Design and implement security controls for AWS, Kubernetes, and cloud infrastructure
What they're looking for
- Application security concepts and secure coding practices
- Vulnerability management and threat modeling
- AWS and Kubernetes cloud technologies
- Python, Go, Java, or similar programming/scripting languages
- CI/CD automation and GitHub workflows
- Infrastructure as code and containerization
- Risk assessment and security architecture
- AI and ML applications in security
Benefits
- Equity compensation for all employees
- Career development and professional growth programs
- Flexible hybrid work model
- Robust time off policies
- Free daily lunch and car discount
- Meditation and fitness app access
Opens the official application on the employer’s site. No login required.
CarGurus
CarGurus operates an automotive marketplace platform that helps consumers find, compare, and purchase vehicles through search, mobile, and engagement tools. The company is hiring Software Development Engineers II across multiple teams to build and optimize backend services, search infrastructure, AI-powered consumer experiences, developer tooling, and email personalization features that serve millions of users globally.
- Website
- cargurus.com
Likely interview questions
- Walk us through a vulnerability you've identified or studied—how would you approach triaging and remediating it?
- Describe your experience with AWS or Kubernetes. How have you applied these technologies in a security context?