2 days ago
Warsaw, PolandSenior
Responsibilities
- Partner with product and engineering teams across the software development lifecycle to integrate security into products and platforms.
- Conduct security architecture reviews, threat modeling, and code reviews for new features and services.
- Develop and maintain secure-by-default frameworks, libraries, and automated SAST/DAST security tooling.
- Identify and address AI-specific security risks, including prompt injection, insecure tool permissions, and agentic attack surfaces.
- Triage, investigate, and drive remediation of vulnerabilities from bug bounty programs, internal testing, and automated tooling.
- Review designs and roadmaps, communicate security constraints, and support informed engineering trade-offs.
- Investigate product security incidents using logs and monitoring tools to contain and resolve issues.
- Improve software supply chain security through dependency management, SCA tooling, and third-party risk evaluation.
- Deliver secure coding training and develop short- and long-term risk management strategies.
Requirements
- 5+ years of experience in application security, product security, or software engineering with a security focus.
- Strong software engineering background using languages such as Python, JavaScript/TypeScript, or Scala.
- Deep knowledge of the OWASP Top 10 and web vulnerabilities including XSS, CSRF, SSRF, and SQL injection.
- Familiarity with AI/ML security concepts, including LLM-specific risks and agentic attack surfaces.
- Experience with SAST, DAST, software composition analysis, and vulnerability management tools.
- Experience conducting security design reviews and threat modeling for complex applications.
- Strong communication, collaboration, pragmatic judgment, and interest in defending against real-world attacks.
- Curiosity about AI tools and emerging technologies and willingness to use them to improve productivity and decision-making.
Benefits
- Gross base salary of 31,000–36,000 PLN per month, plus potential equity and other compensation components.
- Contract of Employment (UoP) in Poland, with an option for 50% tax-deductible author’s-rights costs where applicable.
- Office-centric hybrid schedule in Warsaw, with standard in-office days on Monday, Tuesday, and Thursday; Wednesday work-from-home is generally available and Friday arrangements depend on the work.
- Health insurance with dental and travel coverage through Lux Med.
- Breakfast and lunch catering on office days, vacation allowance, career growth budget, and home office setup budget.
- Gym or fitness card, fertility healthcare and family-forming support, mental health support, and group life insurance.
- MacBook with necessary accessories.
Tech Stack
Categories
About Asana
Asana builds a work management platform that helps teams plan, track, and coordinate projects and goals, with AI-assisted features and integrations. It sells subscription-based SaaS used across functions from marketing to engineering. Founded in 2008 and headquartered in San Francisco, Asana is publicly traded on the NYSE and used by more than 170,000 organizations, including Accenture and Amazon.