Senior Security Engineer (AI)

Quick Facts

Senior Security Engineer (AI) responsible for developing AI security capabilities across the group, including research, assessments, and standards.

Description

Analyze security threats related to artificial intelligence, investigate emerging security solutions, assess effectiveness through testing, and recommend best practices and security controls for projects delivered by the company. Monitor market trends, conduct independent technical research, produce documentation, and share knowledge with project teams and the wider security community.

Cooperation is offered only to candidates located in Poland, with EU citizenship, and willing to commute to the office in Katowice or Gdańsk.

Responsibilities

• AI Security Research and Knowledge Development
  • Monitor trends, emerging threats, and attack techniques targeting AI and LLM-based systems.
  • Analyze new tools, frameworks, and solutions that support AI security.
  • Conduct technical research activities, including proof-of-concept development, laboratory testing, and offensive security testing.
  • Evaluate new AI Security technologies and recommend their adoption where appropriate.
• AI Security Assessments
  • Analyze the architecture of AI-powered systems.
  • Identify risks associated with AI models, AI agents, LLMs, RAG, MCP, and other modern AI components.
  • Assess resilience against Prompt Injection, Jailbreak, Data Exfiltration, Model Abuse, Tool Abuse, and Supply Chain Attacks.
  • Recommend security controls and security architectures for existing and new projects.
• Standards and Documentation Development
  • Develop guidelines, standards, and best practices in AI Security.
  • Support project teams in implementing secure design patterns.
  • Contribute to security recommendations for clients and project teams.
  • Create training and educational materials.
• Knowledge Sharing
  • Organize workshops, presentations, and knowledge-sharing sessions.
  • Support the development of the AI Security community within the organization.
  • Provide consulting and guidance to Application Security, DevSecOps, and Architecture teams.
  • Promote awareness of risks associated with AI technologies.

Requirements

Must have

• Minimum 2 years of experience in Cyber Security.
• Hands-on experience in Application Security, Offensive Security, DevSecOps, or Security Testing.
• Experience in the security assessment of web applications, APIs, and modern application architectures.
• Basic or advanced understanding of AI security concepts.
• Knowledge of threats affecting LLM and Generative AI systems.
• Understanding of attack techniques targeting AI models and LLM-based systems.
• Knowledge of protection mechanisms for AI models, data, and AI agents.
• Interest in AI Governance and AI Risk Management topics.
• Application Security: OWASP Top 10, API Security; SSDLC; Security Testing (manual security testing, code reviews, SAST, DAST).
• Network Security: Network protocols and communication security; network segmentation and access control.
• DevSecOps: CI/CD Security; Software Supply Chain Security.
• Dependency Management and SBOM; experience cooperating with clients.
• EU citizenship.
• Fluent English (B2/C1).
• Open to occasional business trips abroad and visits in Katowice or Gdańsk.

Nice to have

• Experience with GenAI, LLMs, Agentic AI, RAG, or MCP.
• Experience in Penetration Testing.
• Experience in Red Teaming.
• Experience in Security Research.
• Security-related certifications (e.g., OSCP, OSWE, CISSP, GWAPT, GWEB, CARTA).

Benefits

• Luxmed, Medicover Sport, Worksmile.
• Educational and languages learning platforms.
• Referral bonus, life insurance.
• Certifications paid by the company; conferences; Tech Lunches.
• Possibility to join Communities (Project Management, Architecture, Security, Process Management, Leadership, AI and Cloud).
• Local kindergarten.
• Additional: free parking, fresh fruits, workation.