application security engineer for AI models

The team defines consistent Security Software Development Lifecycle practices across client technology projects and helps mitigate application security vulnerabilities throughout planning and delivery.

• Collaborate with software and security engineers to design, maintain, and build product security tools and services
• Serve as the technical point of contact for product teams on CI/CD automation and Product Application Sec Ops
• Use approved AI models and Cyber Harness to assess application code for business logic weaknesses, misconfigurations, and vulnerabilities
• Build and automate scripts that help developers use security services delivered by the Sec Engineering and Automation team
• Own security product QA and testing activities
• Run software composition analysis (SCA) tools
• Explain penetration testing findings to software engineers and assist with triage and risk mitigation
• Communicate business risks when assessing software vulnerabilities
• Improve the operation of SAST, DAST, and IaC security tools
• Enhance Web Application Firewall (WAF) and IDS operations
• Expand security coverage and tooling in cloud environments such as Microsoft Azure and AWS

• Degree in Computer Science or Cyber Security
• 3+ Years of experience in Application Security and a strong application development background
• Hands-on experience with Azure DevOps
• Prior experience using AI models and Cyber Harness to evaluate application and software code security
• Familiarity with GitHub, Copilot, and Codex
• Knowledge of OWASP Top 10 for Agentic AI, AI skills development, and security triage
• Proficiency in Python, JavaScript, C#, or PowerShell
• Deep understanding of OWASP, CWE25, Data Protection, Access Management, software vulnerabilities, secure design best practices, and threat modeling
• Strong analytical skills and attention to detail
• CISSP, CSSLP, CEH, OSCP, or similar certification
• Presentation skills and the ability to explain complex solutions to less technical audiences
• Excellent written and spoken English (B2+)
• Будет плюсом: experience in a large organization or Financial Services, exposure to defining secure SDLC programs across enterprise technology projects

• Remote hiring locations: Poland