Principal Application Security Software Engineer

3003 Sabre Polska Sp. z o.o.; Kraków; On-site; PLN 220,000 - 320,000; Full time

Benefits offered by this job

Paid time off

Parental leave

Volunteer time off

Health insurance

Wellness programs

Professional development

Referral bonus

Job summary

Sabre Polska Sp. z o.o. seeks a hands-on Software/Application-Security Engineer focusing on Java development to build secure tools and platforms.

You will drive AI-powered appsec tools for vulnerability triage, automate discovery, and code fixes, while enhancing Sabre’s AppSec strategy against evolving AI-enabled threats. You will embed scanners (SAST/DAST/SCA) into fast cloud CI/CD pipelines and mentor teams to uphold secure coding practices.

Qualifications

• Minimum 5 years of relevant software and AppSec experience.
• Expert Java development and framework design in fast Agile environments.
• Cloud-based CI/CD pipelines, build tools, and automated workflows.
• Experience using AI agents/LLMs to optimize daily engineering tasks.
• Strong English communication and collaboration skills.

Responsibilities

• Assist development teams planning and building secure software solutions.
• Introduce AppSec tools leveraging AI LLMs for vulnerability triage and fixes.
• Embed security tools and scanners into CI/CD pipelines.
• Define and track application-security metrics and improve remediation times.
• Provide technical guidance, code reviews, and mentorship.
• Participate in security incident response and resolve architectural bottlenecks.

Skills

Java development

Application security

Agile environments

CI/CD pipelines

AI/LLM technologies

English proficiency

Cloud environments (GCP)

Security concepts (OWASP)

Education

Bachelor’s degree in Computer Science

Security certifications (e.g., CISSP)

Tools

SAST

DAST

SCA

Job description

Role and Responsibilities

• Assist development teams in planning, designing, and developing secure software solutions, frameworks, and automations, focusing heavily on hands‑on Java development to build or enhance application security tools and platforms.
• Introduce and implement new application‑security tools leveraging AI LLM technologies to streamline vulnerability triage, automate discovery, and generate autonomous code fixes.
• Evaluate and adapt Sabre’s AppSec strategy to mitigate new vectors and threats stemming from the deployment and utilization of AI LLM models in cybersecurity.
• Collaborate with development and platform teams to embed advanced security tools, scanners (SAST, DAST, SCA), and compliance checks directly into cloud‑based, high‑velocity CI/CD pipelines.
• Define, track, and optimize application‑security metrics; streamline procedures to improve reporting accuracy and shorten the time‑to‑remediation for security findings.
• Provide technical guidance, code reviews, and mentorship to development teams to foster high coding standards, secure development practices, and deep security awareness.
• Participate in security incident response, own application posture improvements, and diagnose complex architectural bottlenecks to ensure optimal system stability and performance.

Qualifications and Education Requirements

• Minimum 5 years of relevant experience in software engineering and application‑security engineering.
• Expert‑level knowledge and hands‑on experience in Java development and framework design within complex, fast‑paced Agile environments.
• Extensive experience operating and designing cloud‑based CI/CD pipelines, build tools, and automated workflows to achieve end‑to‑end security integration.
• Deep familiarity and advanced experience utilizing AI agents at work—including configuring autonomous modes, writing custom instructions, managing specialized agents, and leveraging LLMs to optimize daily engineering tasks.
• Strong understanding of distributed architectures, cloud environments (e.g., GCP), and modern application vulnerability concepts (OWASP Top10, LLM Top10).
• Exceptional problem‑solving abilities with a proven track record of analyzing complex systems to identify and mitigate critical architectural and security bottlenecks.
• Proficient in English (written and verbal), excellent communication skills, collaborative mindset, and the ability to influence cross‑functional stakeholders effectively.
• Nice to have: Bachelor’s degree in Computer Science, Computer Engineering, or a related technical field; equivalent security certifications (e.g., CISSP, CSSLP, CEH).
• General experience with high‑availability, large‑scale distributed systems and capacity planning.
• Familiarity with broader machine‑learning engineering concepts for anomaly detection and predictive maintenance within security operations.

Benefits

• Paid time off, including a year‑end break with fully paid days during the last week of the year.
• Paid parental leave: up to 12 weeks of paid leave after birth or adoption.
• Paid volunteer time: up to 4 days annually.
• Benefit platform and multisport card, tax‑deduction opportunities, employee capital plans, baby bonus.
• Health and wellness: comprehensive medical coverage (Luxmed), foreign travel insurance, employee assistance program, mindfulness & meditation apps, life insurance.
• Career development: access to e‑learning platforms, live learning sessions, certification and tuition reimbursement.
• Community engagement: various employee groups, car and bike parking, fun zone with electronic tables, foosball, ping‑pong, pool table, massage chairs, terraces, and innovation lab amenities.
• Attractive referral bonus: earn $2,500USD for each hired referral.

Sabre is an equal employment opportunity employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, national origin, sex, gender identity, sexual orientation, disability status, protected veteran status or any other characteristic protected by law. Reasonable accommodation is available for qualified individuals with disabilities. Applications may be submitted with optional reception to [e-mail] for technical assistance.