AI AppSec / AiSec Engineer

Mindbox Sp. z o.o.; Kraków; On-site; PLN 120,000 - 180,000; Full time

Job summary

Mindbox Sp. z o.o. is seeking an experienced security engineer to strengthen our application security program in Kraków. You will review code, analyze vulnerabilities, and apply best practices across API security, OAuth2/JWT, and AI/ML risk considerations.

The role requires hands-on work with CI/CD pipelines and security tooling such as Checkmarx, SonarQube, and Nessus, contributing to risk mitigation and secure software delivery.

Qualifications

• Strong background in application security engineering and secure code reviews.
• Expertise in OWASP Top 10, API security, OAuth2/JWT and AI/ML security risks.
• Ability to run threat modelling sessions and articulate risk findings.
• Hands-on experience securing CI/CD pipelines and integrating security tooling.

Skills

Application security

Secure code reviews

Vulnerability analysis

OWASP Top 10

API security

OAuth2/JWT

AI/ML security

Threat modelling

STRIDE

PASTA

CI/CD security

Security tooling

Tools

Checkmarx

SonarQube

TruffleHog

Aqua

Tenable

Nessus

Job description

Nasze wymagania:

• Strong background in application security engineering, including secure code reviews and vulnerability analysis.
• Expertise in OWASP Top 10, API security, OAuth2.0/JWT, and understanding of AI/ML-specific security risks (OWASP LLM Top 10).
• Ability to conduct threat modelling sessions (e.g., STRIDE, PASTA) and articulate risk findings.
• Hands‑on experience securing CI/CD pipelines and integrating security tooling (e.g., Checkmarx, SonarQube, TruffleHog, Aqua, Tenable, Nessus).
• Stro