(Cybersecurity) AI AppSec / AiSec Engineer

AI Application Security Engineer

Location & Work Model

• Hybrid work model - 6 days per month from the office in Kraków (preferred) or Warsaw
• Contract

Benefits

• Private medical care (LuxMed)
• MyBenefit cafeteria platform
• Support from a dedicated Contractor Care specialist

About the Role

We are looking for an experienced AI Application Security Engineer to join a cybersecurity engineering team focused on improving secure software development practices and advancing AI security capabilities across large-scale engineering environments.

In this role, you will work closely with development teams to strengthen application security, support secure-by-design initiatives, and help shape security standards for AI-powered solutions and GenAI adoption. The position combines hands-on application security engineering with emerging AI/ML security practices.

You will contribute to security assessments, secure code reviews, AI security evaluations, and the development of scalable security patterns, while collaborating with engineering teams in Agile and DevSecOps environments.

Key Responsibilities

• Perform secure code reviews and provide actionable security recommendations to development teams

• Identify insecure coding patterns, deprecated technologies, and security gaps, while recommending modern secure alternatives

• Support secure-by-design and shift-left security practices across the software development lifecycle

• Conduct threat modelling sessions for applications and AI/ML systems

• Evaluate and test new security tools, concepts, and approaches through PoC/PoV initiatives

• Assess AI/ML and GenAI security risks, including:

• prompt injection

• model abuse

• training data leakage

• AI supply chain risks

• Review security configurations of AI platforms, tools, and integrations

• Assess the security impact and effectiveness of AI-assisted development tools (e.g. code generation solutions)

• Contribute to the development of reusable security standards, policies, and engineering guidance

• Produce technical documentation and security assessment reports

• Collaborate with engineering teams to improve security awareness and best practices

• Mentor team members and contribute to knowledge-sharing initiatives