Lead Secure Software Engineer - FinTech & AI Security

OANDA Corporation; Kraków; On-site; PLN 180,000 - 260,000; Full time

Job summary

OANDA is seeking a Senior Application Security Engineer to join our global team and push security left across our product ecosystem. You will work with cross-functional engineering teams, demonstrate secure design principles in action, and help advance our DevSecOps practices across multi-language stacks.

You will lead threat modeling, build secure components in JS, Go, Python, C++, and Java, and spearhead AI security tooling and cryptography controls, cloud secrets management, and supply-chain

Qualifications

• Experience in Fintech/financial services or familiarity with financial security threat models & regulations.
• Hands-on experience writing Terraform (Infrastructure as Code) and managing cloud secrets.
• Exposure to AI development frameworks, AI tooling security, or LLM vulnerability vectors.
• Knowledge of industry compliance standards & privacy regulations (SOC2, ISO27001, NIST, GDPR).
• Active involvement in the wider cybersecurity community.

Responsibilities

• Lead & Advocate: provide technical leadership in application security and secure coding practices.
• Build & Remediate: fix vulnerabilities across multiple languages (JS, Go, Python, C++, Java).
• Apply Defense-in-Depth: review cloud security, Terraform IaC, cryptography/secrets management.
• Automate DevSecOps: implement static code analysis, fuzzing, composition analysis.
• Threat Modelling: develop and lead Threat Modelling exercises.
• Pioneer AI Security: implement best practices for secure AI development and AI security tooling.
• Secure Supply Chains: work with dev teams to remediate third-party library vulnerabilities.

Skills

Threat modeling

Secure coding

Design reviews

Static code analysis

Fuzzing

Composition analysis

DevSecOps

Terraform

Cloud secrets

AI security tooling

Tools

Terraform (IaC)

PKI

Hashing

Job description

OANDA is seeking a Senior Application Security Engineer to join our global team and push security left across our product ecosystem. You will work with cross-functional engineering teams, demonstrate secure design principles in action, and help advance our DevSecOps practices across multi-language stacks.

You will lead threat modeling, build secure components in JS, Go, Python, C++, and Java, and spearhead AI security tooling and cryptography controls, cloud secrets management, and supply-chain