Senior Security Champion, AI Gateway Engineer Hybrid Milan

KONG; Milano; Hybrid; EUR 70,000 - 110,000; Full time

Benefits offered by this job

Hybrid work from Milan hub

Bonus and welfare system

Permanent contract under CCNL Commerci

Job summary

Kong in Milan is seeking a Security Champion Software Engineer to join the Runtimes team, embedding security into daily development and guarding the AI gateway and API gateway. You will advocate secure coding and participate in hands-on feature work across the platform.

The role requires practical threat modeling, production software experience, and knowledge of L7 security, authentication, and AI attack vectors. Hybrid work from our Milan hub is offered.

Qualifications

• 3+ years building production software with 2+ years in a dedicated security role.
• Solid coding skills in an object oriented language (Rust, Java, Python, Go or similar).
• Practical threat-modeling experience.
• Working knowledge of cybersecurity, especially L7 security and authentication.
• Basic knowledge of AI attack vectors.

Responsibilities

• Run security-focused code audits, threat modeling, and secure design reviews across AI Gateway and API Gateway capabilities.
• Own vulnerability management end-to-end: triage, reproduction, remediation, verification.
• Partner with AI Gateway engineering on emerging AI/LLM threat patterns (prompt injection, data leakage, model abuse).
• Coach engineers on secure coding practices, turning security findings into lasting team habits.
• Contribute hands-on to Gateway feature work with security built-in from day one.

Skills

Security engineering

Rust

Java

Python

Go

Threat modeling

Vulnerability management

Secure coding

Tools

Nginx

OpenResty

Envoy

Lua

Job description

Kong in Milan is seeking a Security Champion Software Engineer to join the Runtimes team, embedding security into daily development and guarding the AI gateway and API gateway. You will advocate secure coding and participate in hands-on feature work across the platform.

The role requires practical threat modeling, production software experience, and knowledge of L7 security, authentication, and AI attack vectors. Hybrid work from our Milan hub is offered.