application security engineer in AI customer service

Enfint; Greater London; On-site; GBP 90,000 - 130,000; Full time

Benefits offered by this job

Здоровье и благополучие

Офис 3 дня в неделю

Job summary

Fin ищет опытного инженера по кибербезопасности для разработки и эксплуатации безопасных производственных систем SaaS. Ваша работа будет включать внедрение SAML/SSO, threat modelling и сотрудничество с командами разработки для минимизации рисков.

Кандидат должен обладать навыками работы в быстрорастущем окружении, умением строить безопасные решения и реагировать на инциденты. Роль предполагает работу в офисе в Великобритании с гибким подходом к запуску проектов.

Qualifications

• Опыт в SaaS-среде по обеспечению безопасности приложений
• Сильные навыки разработки и эксплуатации production-систем
• Глубокое понимание угроз и практик безопасной разработки
• Опыт проведения архитектурных обзоров и оценок безопасности

Responsibilities

• Внедрение и развитие нулевой надежности безопасности приложений Fin
• Проектирование и внедрение аутентификации, SAML/SSO и управлении доступом
• Проведение архитектурных обзоров и threat modelling
• Реагирование на инциденты и их расследование, remediation
• Разработка инструментов безопасности и автоматизации для разработчиков
• Сотрудничество с командами разработчиков и инженерами безопасности
• Участие в покупке и внедрении AI-оптимизированных решений для безопасности
• Формирование стандартов безопасности и практик DevSecOps

Skills

Application security

Software engineering

Threat modelling

Architecture reviews

Security incident response

Automation tooling

Developer tooling

Communication with teams

Cloud security

Tools

SAML/SSO

Identity & access management

Security automation tooling

CI/CD security tooling

Job description

Описание:

Fin, now part of Salesforce, provides AI-powered customer service through its AI Agent Fin, which delivers always-on support across service, sales, and ecommerce. Its products combine proprietary AI models with an integrated help desk to help businesses manage customer experiences.

Задачи:

• Own and engineer tier-zero security capabilities for securely deploying and managing Fin
• Design, build, and evolve customer-facing security features, including authentication, SAML/SSO, permissions systems, audit and activity logging, malicious URL scanning, and enterprise security controls
• Partner with engineering teams throughout the software development lifecycle to build secure products and services
• Perform architecture reviews, threat modelling exercises, and security assessments for new features and systems
• Build security tooling, automation, and developer-facing building blocks that make secure development easier and more scalable
• Contribute to secure development standards, guidance, and best practices across Fin
• Lead application security initiatives across the software development lifecycle and help teams address security risks early
• Participate in a shared on-call rotation and lead security incident response, investigation, and remediation efforts
• Drive security initiatives from problem definition through design, implementation, and measurable outcomes
• Partner with teams building AI-powered products to assess and mitigate emerging security risks
• Help shape Fin's AI-first approach to security, including AI-powered detection, red-team automation, continuous monitoring, and emerging defensive capabilities
• Support the secure adoption of AI-assisted software development tools and engineering workflows

Требования:

• Proven application security, product security, or security engineering experience within a SaaS environment
• Strong software engineering skills with experience designing, building, and operating production systems
• Deep understanding of modern application security threats, secure software development practices, and threat modelling
• Experience designing, building, or securing authentication, authorization, identity, or enterprise security capabilities
• Experience conducting architecture reviews and security assessments for complex systems
• Hands-on security incident response experience, including leading investigations and remediation efforts
• Strong programming skills and experience building tools, automation, or developer-focused solutions
• Comfortable using modern AI-assisted development tools to improve productivity and engineering effectiveness
• Ability to communicate security concepts clearly and collaborate effectively with engineering teams
• A pragmatic approach to balancing security, customer impact, and engineering velocity
• Nice to have: Experience building or owning authentication, SAML/SSO, identity, or access management capabilities, experience securing AI-powered products or familiarity with security considerations for large language models, agentic systems, retrieval-based architectures, or AI tool integrations, experience building security automation or security-focused platform capabilities at scale, familiarity with cloud security, infrastructure security, or distributed systems, experience working across both large-scale SaaS environments and high-growth companies

Условия:

• Benefits and resources support health and wellbeing, family, time away from work, and financial security
• offerings vary by location
• Certain roles may be eligible for incentive compensation, equity, and benefits
• Employees are expected to be in the office at least three days per week