Principal AppSec Engineer - Java, AI-Driven Security, CI/CD

3003 Sabre Polska Sp. z o.o.; Kraków; On-site; PLN 220,000 - 320,000; Full time

Benefits offered by this job

Paid time off

Parental leave

Volunteer time off

Health insurance

Wellness programs

Professional development

Referral bonus

Job summary

Sabre Polska Sp. z o.o. seeks a hands-on Software/Application-Security Engineer focusing on Java development to build secure tools and platforms.

You will drive AI-powered appsec tools for vulnerability triage, automate discovery, and code fixes, while enhancing Sabre’s AppSec strategy against evolving AI-enabled threats. You will embed scanners (SAST/DAST/SCA) into fast cloud CI/CD pipelines and mentor teams to uphold secure coding practices.

Qualifications

• Minimum 5 years of relevant software and AppSec experience.
• Expert Java development and framework design in fast Agile environments.
• Cloud-based CI/CD pipelines, build tools, and automated workflows.
• Experience using AI agents/LLMs to optimize daily engineering tasks.
• Strong English communication and collaboration skills.

Responsibilities

• Assist development teams planning and building secure software solutions.
• Introduce AppSec tools leveraging AI LLMs for vulnerability triage and fixes.
• Embed security tools and scanners into CI/CD pipelines.
• Define and track application-security metrics and improve remediation times.
• Provide technical guidance, code reviews, and mentorship.
• Participate in security incident response and resolve architectural bottlenecks.

Skills

Java development

Application security

Agile environments

CI/CD pipelines

AI/LLM technologies

English proficiency

Cloud environments (GCP)

Security concepts (OWASP)

Education

Bachelor’s degree in Computer Science

Security certifications (e.g., CISSP)

Tools

SAST

DAST

SCA

Job description

Sabre Polska Sp. z o.o. seeks a hands-on Software/Application-Security Engineer focusing on Java development to build secure tools and platforms.

You will drive AI-powered appsec tools for vulnerability triage, automate discovery, and code fixes, while enhancing Sabre’s AppSec strategy against evolving AI-enabled threats. You will embed scanners (SAST/DAST/SCA) into fast cloud CI/CD pipelines and mentor teams to uphold secure coding practices.