Security Engineer (m/f/n)

InPost has revolutionised e-commerce parcel delivery in Poland and is now one of Europe’s leading out-of-home (OOH) e-commerce enablement platforms. Founded in 1999 by Rafał Brzoska, InPost provides delivery services through a network of over 64,000 Automated Parcel Machines (APMs) and more than 30,000 pick-up and drop-off (PUDO) points across nine European countries: Poland, the United Kingdom, France, Italy, Spain, Portugal, Belgium, the Netherlands and Luxembourg, alongside to-door courier and fulfilment services for ecommerce merchants.

InPost’s extensive OOH network supports rapidly growing parcel volumes across its markets, with 1.4 billion parcels delivered in 2025. Its locker solutions offer consumers a delivery option that is cheaper, more flexible and convenient, environmentally friendly and contactless. As a leading OOH logistics provider, InPost is recognised for transforming parcel delivery economics in Europe, appealing to both consumers and merchants through its flexible, technology-driven solutions.

Your responsibilities:

• Work on the security assessment and secure design review of AI, LLM and agentic systems across InPost's technology estate.
• Identify, reproduce and reason about real vulnerabilities in AI-powered and agentic systems, and work with engineering teams to fix them at the root cause.
• Define and build engineered security controls for AI/ML and LLM-related risks.
• Build security automation and developer-facing tooling that helps product and engineering teams build securely by default.
• Review new AI solutions and system architectures for security risk, and represent security in AI governance forums and the AI solutions catalogue.
• Apply hands-on cloud and container security practices across AWS, Azure and GCP to secure the infrastructure AI systems run on.
• Act as a go-to expert on AI-specific attack classes, keeping InPost's defences ahead of an evolving threat landscape.
• Translate complex technical and security findings into clear, practical guidance for stakeholders across the business.

Must have:

• 5+ years of experience in application security or product security.
• 5+ years of coding experience in one or more general-purpose languages, including shipping and operating production services.
• 5+ years of experience with security assessments, secure design reviews or threat modelling.
• Solid understanding of generative AI, LLMs and AI agents, and how they're built and deployed in production.
• Deep knowledge of AI-specific attack classes and how they apply to real systems.
• Experience securing agentic, code-execution or LLM-integrated systems.
• A track record of finding and reasoning about real vulnerabilities in real systems.
• Experience building engineered security controls, not just flagging issues.
• Hands-on cloud and container security experience on AWS, Azure or GCP.
• Strong presentation skills, with the ability to translate complex technical and security topics into clear business terms for a wide range of stakeholders.
• Good English skills, enabling confident communication in an international environment.

Nice to have:

• Background building security automation or developer-facing security tooling.
• Working knowledge of the OWASP Top 10 for LLM Applications and OWASP Top 10 for Agentic Applications.
• Working knowledge of MITRE ATLAS.

Why InPost?

• Opportunity to work in a diverse, international, and cross-functional environment, along with leading experts.
• You work and learn from a senior leader and their leadership team, expanding your experience and exposure in the e-commerce and logistics industries.
• InPost is a growing company that offers its people an increasing number of opportunities in several locations in Europe.
• Fulfilling careers with a range of benefits for people and investing in providing training opportunities for their development.
• You will feel a part of the InPost community that makes an impact on sustainability, convenient deliveries, and the circular economy every day.
• Excellent working environment and flexible hours
• We offer B2B type of contract