Senior AI Security Engineer – Hybrid Milan, Equity & Bonus

IIT; Genova; Hybrid; EUR 77,000 - 95,000; Full time

Benefits offered by this job

Bonus and welfare system

Hybrid work from Milan hub

Job summary

Kong Inc., the AI Connectivity Company, is seeking a Security Champion to join the Runtimes team in Milan. You will write real code and embed security into every release, auditing security, and shaping how millions of API calls run securely.

You will triage vulnerabilities, model threats, mentor engineers, and collaborate with AI Gateway on prompt injection and data leakage. A hybrid Milan setup and a bonus program are provided.

Qualifications

• 3+ years building production software, with 2+ years in a dedicated security role (AppSec, vulnerability research, or pentesting).
• Solid coding skills in an object oriented language (Rust, Java, Python, Go, or similar).
• Practical threat-modeling experience.
• Working knowledge of cybersecurity (especially L7 security and authentication).
• Basic knowledge of AI attack vectors.

Responsibilities

• Run security-focused code audits, threat modeling, and secure design reviews across our AI Gateway and API Gateway capabilities.
• Own vulnerability management end-to-end: triage, reproduction, remediation, verification.
• Partner with AI Gateway engineering on emerging AI/LLM threat patterns (ie: prompt injection, data leakage, model abuse).
• Coach engineers on secure coding practices, turning security findings into lasting team habits.
• Contribute hands-on to Gateway feature work, with security built-in from day one.

Skills

Secure coding

Threat modeling

Vulnerability triage

Rust

Go

Python

Java

L7 security

Tools

Nginx/OpenResty

Lua

Envoy

Kong

Job description

Kong Inc., the AI Connectivity Company, is seeking a Security Champion to join the Runtimes team in Milan. You will write real code and embed security into every release, auditing security, and shaping how millions of API calls run securely.

You will triage vulnerabilities, model threats, mentor engineers, and collaborate with AI Gateway on prompt injection and data leakage. A hybrid Milan setup and a bonus program are provided.