
Remote opportunity at
Cardinal HealthSenior AI Agentic App Sec Engineer
Cardinal Health is hiring a Senior AI Agentic App Sec Engineer for a full-time, remote position within its Information Security organization. This senior individual contributor role…
Career Tools
About This Role
Cardinal Health is hiring a Senior AI Agentic App Sec Engineer for a full-time, remote position within its Information Security organization. This senior individual contributor role focuses on designing, building, and operationalizing generative and agentic AI capabilities to advance application security across the software development lifecycle. The position combines hands-on software development with security engineering to create automated vulnerability identification, remediation, validation, and workflow solutions. The successful applicant will work…
Job Description
Cardinal Health is hiring a Senior AI Agentic App Sec Engineer for a full-time, remote position within its Information Security organization. This senior individual contributor role focuses on designing, building, and operationalizing generative and agentic AI capabilities to advance application security across the software development lifecycle. The position combines hands-on software development with security engineering to create automated vulnerability identification, remediation, validation, and workflow solutions.
The successful applicant will work alongside software engineering, platform teams, security architecture, and AI governance to transition experimental concepts into supported enterprise systems. Responsibilities include building Python-based services, evaluating AI products, establishing security guardrails for agent identity and least privilege, and conducting adversarial testing against prompt injection and tool misuse. Candidates should balance innovative prototyping with disciplined engineering, ensuring cost efficiency, latency management, and long-term operational sustainability.
The anticipated annual salary for this position spans from $125,300 to $178,900, accompanied by eligibility for a bonus. Cardinal Health provides a robust employee benefits package encompassing medical, dental, vision, health savings accounts, flexible spending accounts, a 401(k) plan, short- and long-term disability coverage, paid time off, paid parental leave, and lifestyle programs.
Responsibilities
- Design and test prototypes using large language models, AI agents, and multi-step agentic workflows
- Develop Python services, automation tools, integrations, and evaluation frameworks for security use cases
- Evaluate security products meant for vulnerability discovery, exploitability analysis, and code remediation
- Build controlled AI workflows that analyze code, suggest changes, run tests, and maintain human oversight
- Set up technical guardrails governing agent identity, least privilege, data access, and secrets handling
- Create test plans and benchmarks measuring accuracy, security, latency, reliability, and cost
- Conduct security testing on AI workflows to check for prompt injection, excessive agency, and data leakage
- Integrate security capabilities with source control, CI/CD pipelines, and vulnerability management systems
- Define reference architectures, operational runbooks, and support models for approved capabilities
- Partner with governance teams to align solutions with enterprise privacy and technology standards
- Support application team pilots, gather feedback, and measure outcomes to guide scaling decisions
Requirements
- Strong hands-on Python development experience for API integration, automation, and testing
- Experience building or integrating solutions with large language models, model APIs, or agent frameworks
- Experience designing agentic workflows that use tools, maintain state, and operate with human approval
- Understanding of secure software development, common vulnerabilities, threat modeling, and supply chain risk
- Familiarity with application security tools such as SAST, SCA, DAST, container security, and IaC security
- Experience with Git, pull requests, CI/CD, automated testing, containers, and Kubernetes
- Ability to evaluate AI output quality using repeatable test cases, metrics, and red-team scenarios
- Understanding of AI security risks like prompt injection, data leakage, and insecure tool use
- Ability to transition experimental engineering into enterprise operationalization
Qualifications
- Bachelor's degree in computer science, software engineering, cybersecurity, or a related field, or equivalent practical experience
- Substantial professional experience in software engineering, security engineering, Application Security, or DevSecOps
- Experience delivering complex technical work with limited definition across multiple stakeholder groups
- Experience with programming languages or platforms like Java, JavaScript/TypeScript, .NET/C#, or Go
- Familiarity with cloud services, infrastructure as code, and enterprise developer platforms
- Background in AI evaluation, adversarial testing, red teaming, or governance controls
- Knowledge of industry guidance from OWASP and NIST
- Relevant certifications such as CISSP, CSSLP, CCSP, GWEB, or cloud-provider credentials
Core Skills
Benefits
- Medical, dental, and vision coverage
- Paid time off plan
- Health savings account
- 401(k) savings plan
- Access to wages before pay day via myFlexPay
- Flexible spending accounts
- Short- and long-term disability coverage
- Work-Life resources
- Paid parental leave
- Healthy lifestyle programs
Frequently Asked Questions
Answers are based only on the employer’s listing; where it doesn’t say, neither do we.
What is the remote work policy for this role?
The posting specifies that the job is remote and employment is full-time.
What is the salary range for the Senior AI Agentic App Sec Engineer?
The anticipated annual salary range is USD 125,300 to 178,900, and the position is bonus eligible.
What benefits are offered by Cardinal Health?
Cardinal Health provides medical, dental, and vision coverage, a 401(k) plan, health savings and flexible spending accounts, paid time off, paid parental leave, short- and long-term disability coverage, myFlexPay access, and lifestyle programs.
When does the application window close?
The application window is anticipated to close on December 23, 2026, though interested candidates are advised to apply as soon as possible.
Sample Interview Questions
AI-generated questions tailored to this specific role — a preview of the full practice set.