22 hours ago
Warsaw, Poland or Kraków, PolandSenior
Responsibilities
- Conduct security assessments, secure design reviews, and threat modeling for AI, LLM, and agentic systems.
- Identify, reproduce, and analyze vulnerabilities in AI-powered and agentic systems and collaborate with engineering teams on root-cause fixes.
- Define and build engineered security controls for AI/ML and LLM-related risks.
- Build security automation and developer-facing tooling that enables secure-by-default product development.
- Review AI solutions and architectures for security risks and represent security in AI governance forums and the AI solutions catalogue.
- Apply cloud and container security practices across AWS, Azure, and GCP.
- Track AI-specific attack classes and translate technical security findings into practical guidance for stakeholders.
Requirements
- At least 5 years of experience in application security or product security.
- At least 5 years of coding experience in one or more general-purpose languages, including shipping and operating production services.
- At least 5 years of experience with security assessments, secure design reviews, or threat modeling.
- Solid understanding of generative AI, LLMs, and AI agents and how they are built and deployed in production.
- Deep knowledge of AI-specific attack classes and experience securing agentic, code-execution, or LLM-integrated systems.
- Demonstrated ability to find and reason about real vulnerabilities in real systems and build engineered security controls.
- Hands-on cloud and container security experience with AWS, Azure, or GCP.
- Strong presentation and stakeholder communication skills and good English-language ability.
- Experience building security automation or developer-facing security tooling is desirable.
- Working knowledge of the OWASP Top 10 for LLM Applications, OWASP Top 10 for Agentic Applications, or MITRE ATLAS is desirable.
Benefits
- Diverse, international, and cross-functional working environment with access to leading experts.
- Opportunity to work and learn from senior leadership while gaining exposure to the e-commerce and logistics industries.
- Training and development opportunities within a growing European company.
- Excellent working environment and flexible hours.
- B2B type of contract.
Tech Stack
Categories
About InPost
InPost is a public logistics company listed on Euronext Amsterdam that builds and operates an out-of-home parcel delivery network for e-commerce. Its network includes more than 50,000 out-of-home pick-up points, including over 27,000 parcel lockers, plus to-door courier and fulfillment services for online merchants across Poland, the UK, Italy, Iberia, France and Benelux. Headquartered in Luxembourg, it acquired French operator Mondial Relay in 2021.