AppSec Engineer: AI-Driven Security & Threat Hunting

ShipMonk

Poland

On-site

PLN 180,000 - 260,000

Full time

2 days ago

Be an early applicant

A complete application in a minute

Tailored resume and cover letter, ready to send.

Get past ATS filters

Job summary

ShipMonk is seeking a Security Engineer to join our growing security team. You will work across incident response, vulnerability management, CI/CD security automation, and AI-assisted security to strengthen our cloud and SaaS posture.

You’ll own identity governance (Okta), access reviews, and security education for developers, while collaborating with Legal and HR on incidents and investigations. You’ll design and implement detection, monitoring, and playbooks for Okta, AWS, Snowflake, Google

Qualifications

3+ years in security engineering, security operations or similar role.
Hands‑on experience with incident response and log analysis.
Strong IAM skills: Okta or a similar identity provider, SSO/SAML, MFA.
Experience securing cloud and SaaS environments such as Google Workspace, GCP, or AWS.
Experience with a SIEM and writing detection rules.
Scripting skills (Python or similar) and comfort working with APIs.
Working knowledge of SOC 2 or ISO 27001.
Hands‑on use of AI tools such as LLM assistants or coding agents in daily work, alongside an agile mindset with a habit of learning and adapting.
Fluency in English and the ability to push security work forward across teams.

Responsibilities

Security culture and practices: drive a security‑first mindset across engineering teams.
Vulnerability management and penetration testing: identify and assess vulnerabilities.
CI/CD security automation: implement automated vulnerability discovery in CI/CD.
Secure developer education: teach secure coding practices to developers.
Identity and access: own Okta policies, access reviews, and secure requests.
Incident response: triage, contain, and analyse incidents with evidence for Legal/HR.
Detection and monitoring: read logs and build playbooks for core tooling (Okta, AWS, Snowflake, Google Workspace).
Cloud, SaaS and endpoint security: secure platforms and define MDM baselines.
Application security: understand vulnerabilities, patching, and stakeholder management.
Compliance and risk: support SOC 2 Type II, GDPR, ISO27001; vendor assessments; risk register.
AI-assisted security: use AI tools for investigations and automation; shape safe AI use.
Awareness: run phishing simulations and security communications.