2 days ago
Warsaw, Poland or Kraków, PolandSenior
Responsibilities
- Conduct security assessments, secure design reviews, and threat modeling for AI, LLM, and agentic systems.
- Identify, reproduce, and analyze vulnerabilities in AI-powered and agentic systems and work with engineering teams on root-cause remediation.
- Define and build engineered security controls for AI/ML and LLM-related risks.
- Build security automation and developer-facing tooling that supports secure-by-default development.
- Review AI solutions and architectures for security risk and represent security in AI governance forums and the AI solutions catalogue.
- Apply cloud and container security practices across AWS, Azure, and GCP.
- Provide expertise on AI-specific attack classes and translate technical security findings into practical guidance.
Requirements
- At least 5 years of experience in application security or product security.
- At least 5 years of coding experience in one or more general-purpose languages, including shipping and operating production services.
- At least 5 years of experience with security assessments, secure design reviews, or threat modeling.
- Solid understanding of generative AI, LLMs, and AI agents and how they are built and deployed in production.
- Deep knowledge of AI-specific attack classes and experience securing agentic, code-execution, or LLM-integrated systems.
- Track record of finding and reasoning about real vulnerabilities in real systems.
- Experience building engineered security controls.
- Hands-on cloud and container security experience with AWS, Azure, or GCP.
- Strong presentation skills and ability to communicate complex security topics to varied stakeholders.
- Good English communication skills.
- Background in security automation or developer-facing security tooling is desirable.
- Working knowledge of the OWASP Top 10 for LLM Applications, OWASP Top 10 for Agentic Applications, or MITRE ATLAS is desirable.
Benefits
- Diverse, international, and cross-functional work environment with access to leading experts.
- Opportunity to learn from a senior leader and leadership team and gain exposure to e-commerce and logistics.
- Training and development opportunities.
- Excellent working environment and flexible hours.
- B2B-type contract.
- Role is offered across several European locations, with the specific work arrangement not otherwise stated.
Tech Stack
Categories
About InPost
InPost is a public logistics company listed on Euronext Amsterdam that builds and operates an out-of-home parcel delivery network for e-commerce. Its network includes more than 50,000 out-of-home pick-up points, including over 27,000 parcel lockers, plus to-door courier and fulfillment services for online merchants across Poland, the UK, Italy, Iberia, France and Benelux. Headquartered in Luxembourg, it acquired French operator Mondial Relay in 2021.