AI AppSec Engineer: Threat Modeling & Secure CI/CD

Mindbox Sp. z o.o.; Kraków; On-site; PLN 120,000 - 180,000; Full time

Job summary

Mindbox Sp. z o.o. is seeking an experienced security engineer to strengthen our application security program in Kraków. You will review code, analyze vulnerabilities, and apply best practices across API security, OAuth2/JWT, and AI/ML risk considerations.

The role requires hands-on work with CI/CD pipelines and security tooling such as Checkmarx, SonarQube, and Nessus, contributing to risk mitigation and secure software delivery.

Qualifications

• Strong background in application security engineering and secure code reviews.
• Expertise in OWASP Top 10, API security, OAuth2/JWT and AI/ML security risks.
• Ability to run threat modelling sessions and articulate risk findings.
• Hands-on experience securing CI/CD pipelines and integrating security tooling.

Skills

Application security

Secure code reviews

Vulnerability analysis

OWASP Top 10

API security

OAuth2/JWT

AI/ML security

Threat modelling

STRIDE

PASTA

CI/CD security

Security tooling

Tools

Checkmarx

SonarQube

TruffleHog

Aqua

Tenable

Nessus

Job description

Mindbox Sp. z o.o. is seeking an experienced security engineer to strengthen our application security program in Kraków. You will review code, analyze vulnerabilities, and apply best practices across API security, OAuth2/JWT, and AI/ML risk considerations.

The role requires hands-on work with CI/CD pipelines and security tooling such as Checkmarx, SonarQube, and Nessus, contributing to risk mitigation and secure software delivery.