Lead AI Security Engineer

Quick Facts

• Role: Lead AI Security Engineer

Description

Lead AI Security Engineer focused on embedding security into the full software development lifecycle, from design and coding to build and release. You will operate application security tooling and CI/CD pipelines, run threat modeling and secure design reviews, and perform manual and AI-assisted secure code reviews. The role also secures AI- and LLM-powered application features through guardrails, prompt security defenses, and AI-assisted AppSec automations.

Responsibilities

• Drive shift-left and secure-by-design practices across engineering teams
• Facilitate threat modeling, architecture security reviews, and design reviews for applications, services, and APIs
• Conduct secure code reviews and advise developers on secure coding patterns and remediation
• Implement and operate AppSec tooling (SAST, DAST, IAST, SCA, secrets scanning, IaC scanning) integrated into CI/CD
• Triage, validate, prioritize, and reduce false positives; track issues through to remediation
• Define and maintain security gates and policies in CI/CD that balance risk reduction with developer velocity
• Secure the software supply chain (SBOM, artifact integrity and signing, build pipeline hardening, open-source risk management)
• Support application penetration testing and validate fixes
• Strengthen secrets management, secure configuration, API security, container/image security, and microservice security practices
• Run a security champions program and deliver secure-coding training, guidelines, and reusable security patterns
• Maintain application security standards, baselines, and policy-as-code; contribute to vulnerability management and risk acceptance
• Build AI-assisted automations and agentic workflows for vulnerability triage and remediation workflows
• Integrate AI agents and LLM automations into SDLC/CI/CD via function calling, REST, and webhooks
• Develop and tune prompts/templates and implement retrieval (e.g., RAG) so AI answers from authoritative internal context
• Implement evaluation, validation, and human-in-the-loop checkpoints with guardrails and approval gates
• Apply security/privacy controls for AI usage (least-privilege access, secure secrets handling, prompt-injection resistance, auditability)
• Design security controls for AI/LLM application features aligned with OWASP Top 10 for LLM Applications

Requirements

• Bachelor’s degree in Computer Science, Information Security, Engineering, or equivalent practical experience
• Hands-on application security experience across the SDLC
• Strong understanding of application vulnerability classes and mitigations, including OWASP Top 10, and secure coding principles
• Practical experience with SAST, DAST, SCA, and secrets scanning, integrated into CI/CD
• Ability to read code and assess vulnerabilities in at least one programming language (Python, Java, C#, JavaScript/TypeScript, or Go)
• Experience with threat modeling and secure design review methodologies
• Working knowledge of DevOps/DevSecOps practices, CI/CD pipelines, and secure-by-design principles
• Familiarity with cloud application security concepts on Azure, AWS, or GCP
• Experience collaborating with production engineering teams and cross-functional stakeholders
• Ability to follow, maintain, and improve defined security processes
• Practical understanding of AI-assisted productivity/automation (agents, LLM integrations, structured prompting, AI runbooks/scripts/queries/docs)
• Ability to use AI tools securely, including awareness of sensitive data handling and access control
• Strong communication skills to explain security risks and remediation plans to technical and non-technical stakeholders

Benefits

• Hybrid-by-design work model with the opportunity to work remotely within Poland
• Chance to work abroad for up to 60 days annually and business-driven relocation opportunities
• Career development programs and mentoring
• Certification support (Anthropic, Gemini, GCP, Azure, AWS) and English classes
• Stable pay with participation in an Employee Stock Purchase Plan (15% discount)
• Comprehensive benefits package (health insurance, multisport, shopping vouchers)
• Referral bonuses up to $2,000
• Office amenities and social/well-being events
• Contractor work possible via individually agreed B2B terms