Senior Application Security Engineer

Responsibilities

• Assess the existing AI-native platform, mapping architecture, APIs, sensitive data flows and trust boundaries; prioritize security findings and remediation.
• Review code for authentication, authorization, input handling, data isolation, secrets and privileged operations; reproduce vulnerabilities and verify fixes.
• Secure AI agent identities, tool permissions, data access, execution isolation and third-party integrations.
• Test prompt injection and tool misuse scenarios; implement approvals, execution limits, interruption and recovery controls for sensitive actions.
• Establish secure review practices for AI-generated code, with accountable engineering owners and specialist review of security-sensitive changes.
• Integrate code, dependency, secret and deployment security checks into CI/CD, and create meaningful security regression tests.
• Review AI coding agents' access to repositories, credentials and deployment systems; coordinate independent testing and ensure critical/high-risk findings are resolved and retested before release.

Requirements

• Strong software engineering background and the ability to review, debug and modify production code.
• Hands-on experience building or significantly contributing to an AI agent platform, including implementing and validating security and safety controls.
• Proven application security and architecture review experience, including finding, fixing and retesting vulnerabilities.
• Solid knowledge of authentication, authorization, API security, data isolation, secrets management and secure cloud deployment.
• Experience with manual code review, security testing and automated analysis, and the ability to distinguish genuine security risks from tool noise.
• Practical experience using AI development tools while independently checking generated code, tests and configuration changes.
• Clear English communication skills and the ability to collaborate with developers, architects and engineering leads.

As A Plus

• Hands-on application penetration testing and familiarity with OWASP ASVS or comparable application security standards.
• Experience introducing secure development practices into teams using AI coding agents.
• Security assessment of agent runtimes, tool servers, retrieval systems and third-party integrations.

We Offer

• Competitive salary
• Flexible schedule
• Social package
• Courses, webinars, and seminars to increase professional skills
• Possibility to work remotely and onsite
• Horizontal hierarchy. No micromanagement pressure
• Open company culture where your ideas and initiatives are valued
• Regular team building & corporate events
• International projects