2 hours ago
Remote, Poland or Warsaw, PolandSenior
Responsibilities
- Conduct security assessments, secure design reviews, threat modelling, and architecture reviews for AI, LLM, and agentic systems.
- Identify, reproduce, and reason about vulnerabilities in AI-powered and agentic systems and work with engineering teams to remediate root causes.
- Define and build engineered security controls for AI/ML and LLM-related risks.
- Build security automation and developer-facing tooling that supports secure-by-default development.
- Apply cloud and container security practices across AWS, Azure, and GCP.
- Represent security in AI governance forums and the AI solutions catalogue.
- Advise stakeholders on AI-specific attack classes and translate technical security findings into practical business guidance.
Requirements
- At least 5 years of experience in application security or product security.
- At least 5 years of coding experience in one or more general-purpose languages, including shipping and operating production services.
- At least 5 years of experience with security assessments, secure design reviews, or threat modelling.
- Solid understanding of generative AI, LLMs, and AI agents and how they are built and deployed in production.
- Deep knowledge of AI-specific attack classes and experience securing agentic, code-execution, or LLM-integrated systems.
- Demonstrated ability to find and reason about real vulnerabilities and build engineered security controls.
- Hands-on cloud and container security experience with AWS, Azure, or GCP.
- Strong presentation and stakeholder communication skills and good English proficiency.
- Preferred: experience building security automation or developer-facing security tooling.
- Preferred: working knowledge of the OWASP Top 10 for LLM Applications, OWASP Top 10 for Agentic Applications, and MITRE ATLAS.
Benefits
- Diverse, international, and cross-functional working environment with access to leading experts.
- Opportunity to learn from senior leadership and expand experience in e-commerce and logistics.
- Training and development opportunities with a range of employee benefits.
- Excellent working environment and flexible hours.
- B2B type of contract.
Tech Stack
Categories
About InPost
InPost is a public logistics company listed on Euronext Amsterdam that builds and operates an out-of-home parcel delivery network for e-commerce. Its network includes more than 50,000 out-of-home pick-up points, including over 27,000 parcel lockers, plus to-door courier and fulfillment services for online merchants across Poland, the UK, Italy, Iberia, France and Benelux. Headquartered in Luxembourg, it acquired French operator Mondial Relay in 2021.