Senior Application Security Engineer

Responsibilities
Assess the existing AI-native platform, mapping architecture, APIs, sensitive data flows and trust boundaries; prioritize security findings and remediation.
Review code for authentication, authorization, input handling, data isolation, secrets and privileged operations; reproduce vulnerabilities and verify fixes.
Secure AI agent identities, tool permissions, data access, execution isolation and third-party integrations.
Test prompt injection and tool misuse scenarios; implement approvals, execution limits, interruption and recovery controls for sensitive actions.
Establish secure review practices for AI-generated code, with accountable engineering owners and specialist review of security-sensitive changes.
Integrate code, dependency, secret and deployment security checks into CI/CD, and create meaningful security regression tests.
Review AI coding agents' access to repositories, credentials and deployment systems; coordinate independent testing and ensure critical/high-risk findings are resolved and retested before release.
Requirements
Strong software engineering background and the ability to review, debug and modify production code.
Hands-on experience building or significantly contributing to an AI agent platform, including implementing and validating security and safety controls.
Proven application security and architecture review experience, including finding, fixing and retesting vulnerabilities.
Solid knowledge of authentication, authorization, API security, data isolation, secrets management and secure cloud deployment.
Experience with manual code review, security testing and automated analysis, and the ability to distinguish genuine security risks from tool noise.
Practical experience using AI development tools while independently checking generated code, tests and configuration changes.
Clear English communication skills and the ability to collaborate with developers, architects and engineering leads.
As A Plus
Hands-on application penetration testing and familiarity with OWASP ASVS or comparable application security standards.
Experience introducing secure development practices into teams using AI coding agents.
Security assessment of agent runtimes, tool servers, retrieval systems and third-party integrations.
We Offer
Competitive salary
Flexible schedule
Social package
Courses, webinars, and seminars to increase professional skills
Possibility to work remotely and onsite
Horizontal hierarchy. No micromanagement pressure
Open company culture where your ideas and initiatives are valued
Regular team building & corporate events
International projects