{"id":4022600,"url":"https://alion.io/job/apify-senior-security-engineer","title":"Senior Security Engineer","company":{"id":6237,"name":"Apify","domain":"apify.com","url":"https://alion.io/company/apify-technologies-s-r-o","size_band":"201-500","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Ashby","truth_index":{"grade":"A","score":95,"open_postings":12,"ghost_share":0,"stale_share":0,"repost_share":0,"time_to_fill_p50_days":117,"computed_at":"2026-11-10T06:52:35Z"}},"role":"Security","role_family":"Security","seniority":"senior","employment_type":"full_time","work_mode":"hybrid","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Czech Republic"],"countries":["CZ"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":null,"experience_years_min":3,"visa_sponsorship":false,"relocation_package":false,"has_equity":true,"technologies":[{"name":"AI Agents","optional":false},{"name":"AWS","optional":false},{"name":"CI/CD","optional":false},{"name":"GitHub","optional":false},{"name":"GitHub Actions","optional":false},{"name":"Go","optional":false},{"name":"IAM","optional":false},{"name":"Model Context Protocol","optional":false},{"name":"Node JS","optional":false},{"name":"OWASP Top 10","optional":false},{"name":"Python","optional":false},{"name":"Red Teaming","optional":false},{"name":"Threat Modeling","optional":false},{"name":"TypeScript","optional":false},{"name":"Amazon EC2","optional":true},{"name":"Amazon EKS","optional":true},{"name":"Amazon S3","optional":true},{"name":"AWS Lambda","optional":true},{"name":"Burp Suite","optional":true},{"name":"Claude","optional":true},{"name":"CloudFormation","optional":true},{"name":"Copilot","optional":true},{"name":"Cursor","optional":true},{"name":"Cypress","optional":true},{"name":"Docusaurus","optional":true},{"name":"DynamoDB","optional":true},{"name":"Gemini","optional":true},{"name":"Google Workspace","optional":true},{"name":"Grafana","optional":true},{"name":"Helm","optional":true},{"name":"ISO 27001","optional":true},{"name":"JavaScript","optional":true},{"name":"Kubernetes","optional":true},{"name":"Nest.JS","optional":true},{"name":"Next.js","optional":true},{"name":"Notion","optional":true},{"name":"OpenTelemetry","optional":true},{"name":"PagerDuty","optional":true},{"name":"Playwright","optional":true},{"name":"Prometheus","optional":true},{"name":"React.js","optional":true},{"name":"Redis","optional":true},{"name":"Sentry","optional":true},{"name":"Slack","optional":true},{"name":"SOC 2","optional":true},{"name":"Storybook","optional":true},{"name":"styled-components","optional":true},{"name":"Terraform","optional":true},{"name":"Vitest","optional":true}],"status":"live","first_seen_at":"2026-11-10T11:17:47Z","employer_posted_date":"2026-11-10","last_verified_at":"2026-11-10T15:41:03Z","board_verified":true,"closed_at":null,"days_open":0,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":0},"description":"Apify is the largest marketplace of trusted tools for AI that automate work on the web. Thousands of Actors get web data, generate leads, monitor social media, track competitors, and integrate with existing apps and agents. Actors are created by a global community of builders who earn from them, while Apify manages infrastructure, billing, and distribution. Learn more at apify.com.\nJoin us to help people put the web to work. Apify can find missing children, protect consumers from fake discounts across the EU, and feed data to AI chatbots.\nTo support this mission, Apify is looking for a Security Engineer who thinks like an attacker. You'll be the second member of the security team. The Apify platform runs code from a global community of builders and powers AI agents through MCP. That's a big attack surface, and we need someone in-house who finds the weak spots before anyone else does. You'll spend most of your time on offense: researching, testing, and hunting. The rest goes to defense: helping engineers fix what you find and improving detection and automation. Red team at heart, purple team in practice.\nWhat you’ll be working on:\nOffensive testing: Attack Apify the way a real attacker would: the platform (multi-tenant isolation, Actor sandboxing, Apify Proxy, API, Console), AI agents and MCP servers (prompt injection, tool poisoning, data exfiltration), our supply chain and CI/CD (dependencies, GitHub Actions, open-source projects like Crawlee), and AWS (IAM, network, logging).\n\nAI-assisted security work: Use AI tools daily for pentesting, recon, code review, exploit development, and research.\n\nSecurity research: Follow new vulnerabilities, attack techniques, and threat actor activity. Assess what they mean for Apify and act on them fast.\n\nThreat modeling: Map realistic attack paths for new features and architectural changes before they ship.\n\nVulnerability management: Triage, reproduce, and rate reports from researchers, pentesters, scanners, and your own testing. Agree on fixes with engineering, make sure they land within SLAs, and help run Apify's vulnerability program.\n\nAutomation: Use scripting and AI to scale the program: triage pipelines, AI-assisted code review, advisory monitoring, and your own attack tooling.\n\nDetection and response: Hunt for signs of compromise and platform abuse, turn findings from hunting and attacking into detections, and support incident response.\n\nWho we’re looking for:\nExperience: 3+ years in offensive security, penetration testing, security research, AppSec, or a closely related field.\n\nAttacker mindset: Hands-on experience finding and exploiting vulnerabilities in web applications and APIs, well beyond OWASP Top 10 checklists.\n\nCloud: Hands-on experience securing and breaking AWS environments (IAM, CloudTrail, GuardDuty).\n\nScripting or programming: You write your own tools and automation in Python, Go, Bash, or similar. Proficiency in Node.js/TypeScript is a plus.\n\nTooling: Experience with Burp Suite or similar, vulnerability scanners, SAST/DAST, and GitHub's security features.\n\nAI: You use AI tools in your daily work and understand how LLMs and AI agents can be attacked.\n\nCuriosity: You follow the security community, read new research when it drops, and can't leave an interesting bug alone.\n\nCommunication: You explain technical risks clearly to developers and leadership, and you work with engineers, not against them.\n\nSelf-starter mentality: You find work on your own instead of waiting for tickets.\n\nCompliance (nice to have): Familiarity with frameworks like SOC 2 or ISO 27001.\n\nOur tech stack:\nSecurity: AISLE, Claude Mythos, GitHub Advanced Security, in-house security Actors (the Apify platform scanning itself)\n\nFrontend: React.js, styled-components, Storybook, Chromatic, Cypress, Playwright\n\nBackend: TypeScript/Node.js, Nest.js, Next.js, Docusaurus, Vitest\n\nInfra: AWS Compute (Kubernetes (EKS), EC2, Lambda), Helm, Terraform, CloudFormation, MongoDB, Redis, DynamoDB, S3, GitHub Actions\n\nMonitoring: Grafana, Prometheus, OpenTelemetry, Mezmo, Sentry, PagerDuty\n\nTools: GitHub, Notion, Google Workspace, Slack\n\nOS, code editor, and AI assistant of your choice (Claude premium with unlimited tokens, GH Copilot, Cursor, Gemini, or JetBrains AI)\n\nProcess: two-week sprints, code reviews, tests, automating whatever we can, and deploying multiple times per day.\n\nWhy should you work at Apify?\nSpace, support, and autonomy for personal growth, with a direct impact on our success\n\nFull-time position in our amazing offices in Prague (100Yards) or Brno (Titanium)\n\nOption to work fully remotely\n\nFlexible working hours (perfect for both night owls and early birds )\n\nNobody counts holidays as long as the work gets done\n\nUnlimited Claude for every Apifier. We don't count tokens. Just use them well\n\nStock options and profit sharing\n\nFree Apify credits for your friends and family to try the platform\n\nFree Multisport card\n\nRegular massages in the Prague office, mostly covered by Apify\n\nWe welcome pets, kids, and bikes in the office\n\nEpic team buildings and offsites with biking, canoeing, and other adventures\n\nSolid education and training budget, conference tickets, internal “Eat & Learn” sessions, and the possibility to work across teams\n\nGenerous hardware budget\n\nFree lunches every day when working from the office\n\nUnlimited supply of & and snacks\n\nFree entry to the wonderful Prague and Brno Zoo\n\nPing-pong, chess, PS5, foosball league after lunch.\n\nFor more details about Apify and what it’s like to work with us, see our Careers page.","description_format":"text","description_chars":5551,"description_truncated":false,"requirements":{"experience_years_min":3,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":["Flexible schedule","Stock options"],"hiring_locations":[{"name":"Czech Republic","iso":"CZ","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Web Scraping & Proxy Networks"],"lifecycle":[{"event":"open","at":"2026-11-10T15:41:03Z"}],"visa":[],"liveness":{"score":86,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.86,"p_room":1,"age_days":0,"expected_fill_days":117,"reasons":["conf:2","win:early"],"computed_at":"2026-11-10T18:03:28Z"},"pay":null,"html_url":"https://alion.io/job/apify-senior-security-engineer","json_url":"https://alion.io/job/apify-senior-security-engineer.json","meta":{"generated_at":"2026-11-10T18:03:28Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":7468,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-11T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.1,"usd":0.01,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":6237},"rest":"https://alion.io/mcp/rest/get_company?id=6237"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fapify-senior-security-engineer"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":2,"usd":0.2},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fapify-senior-security-engineer"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.1,"usd":0.01},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fapify-senior-security-engineer"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/apify-senior-security-engineer\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fapify-senior-security-engineer"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":4022600}},{"tool":"search_jobs","arguments":{"company":"apify.com","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":4022600},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}