Senior Security Engineer
Apify Technologies s.r.o.1 day ago
Remote, CzechiaSenior
Responsibilities
- Conduct offensive testing against Apify’s platform, multi-tenant isolation, Actor sandboxing, Apify Proxy, API, Console, AI agents, MCP servers, supply chain, CI/CD, and AWS environments.
- Use AI tools for penetration testing, reconnaissance, code review, exploit development, and security research.
- Research vulnerabilities, attack techniques, and threat actor activity and assess their impact on Apify.
- Threat-model new features and architectural changes before release.
- Triage, reproduce, and rate vulnerability reports; coordinate fixes with engineering and track remediation within SLAs.
- Build security automation including triage pipelines, AI-assisted code review, advisory monitoring, and attack tooling.
- Hunt for compromise and platform abuse, develop detections, and support incident response.
Requirements
- 3+ years of experience in offensive security, penetration testing, security research, AppSec, or a closely related field.
- Hands-on experience finding and exploiting vulnerabilities in web applications and APIs beyond OWASP Top 10 checklists.
- Hands-on experience securing and attacking AWS environments, including IAM, CloudTrail, and GuardDuty.
- Ability to write security tools and automation in Python, Go, Bash, or similar languages.
- Proficiency in Node.js/TypeScript is preferred.
- Experience with Burp Suite or similar tools, vulnerability scanners, SAST/DAST, and GitHub security features.
- Practical understanding of how LLMs and AI agents can be attacked and experience using AI tools in daily work.
- Familiarity with security research, threat activity, technical risk communication, and collaborative work with engineers.
- Familiarity with SOC 2 or ISO 27001 is a nice-to-have qualification.
Benefits
- Full-time position based in Apify’s Prague or Brno offices, with an option to work fully remotely.
- Flexible working hours and an autonomy-focused work environment.
- Stock options and profit sharing.
- Unlimited Claude access, free Apify credits for friends and family, and a free Multisport card.
- Regular massages in the Prague office, office-friendly policies for pets, children, and bikes, and team buildings and offsites.
- Education and training budget, conference tickets, internal Eat & Learn sessions, cross-team work opportunities, and a generous hardware budget.
- Free lunches when working from the office, drinks and snacks, and access to office recreation and Prague and Brno Zoo benefits.
Tech Stack
Amazon DynamoDBAWSBashCypressGitHub ActionsGoGrafanaHelmKubernetesMongoDBNestJSNext.jsNode.jsPrometheusPythonReactRedisTerraformTypeScript
Categories
About Apify Technologies s.r.o.
Apify Technologies s.r.o. builds a platform for web scraping, browser automation, and AI‑agent tooling, plus a marketplace of serverless “Actors” used by developers and data teams. It offers APIs, no‑code tools, and integrations with n8n, Make, Zapier, and LangChain, with a SaaS model and revenue sharing for creators. Founded in 2016 and headquartered in Prague, it hosts thousands of Actors on its store, and its creator community earns over $1.5 million monthly.