security engineer in fintech

Enfint; Warszawa; On-site; PLN 180,000 - 320,000; Full time

Benefits offered by this job

Competitive salary

Annual leave

Employee referral program

Medical insurance and pension plans

Remote work days (30 extra days to be

Volunteer days

Job summary

Capital.com ищет специалиста по безопасности в сфере AI/ML для разработки и внедрения безопасной архитектуры систем, включая LLM и интеграции с API.

Кандидат будет проводить threat modeling, обеспечивать соответствие требованиям GDPR и регуляторных норм финансовой отрасли, а также сотрудничать с командами разработки и платформы для защиты данных и инфраструктуры.

Qualifications

• 3–5+ лет опыта в области разработки ПО, ML или кибербезопасности.
• Практический опыт работы с системами AI/ML, включая LLMs и NLP-модели.
• Python для автоматизации и скриптов.

Responsibilities

• Разработка и внедрение средств безопасности для AI/ML на стадиях разработки, обучения и эксплуатации.
• Защита интеграций LLM, RAG-конвейеров и API AI.
• Проведение threat modeling и оценок рисков AI-систем.

Skills

Security engineering

AI/ML security

Python

Threat modeling

Communication

Explain risks to non-security teams

Tools

Claude Code

Docker

Kubernetes

Cloud platforms (AWS/Azure/GCP)

Job description

Описание:

Capital.com is a financial services company at the forefront of the digital assets movement, developing AI-driven systems that include LLM-based applications, machine learning models, and AI-enabled automation tools.

Задачи:

• Design and implement security controls for AI/ML systems across development, training, and production
• Secure LLM integrations, RAG pipelines, and AI APIs
• Conduct threat modeling for AI systems and data pipelines
• Define secure-by-design patterns for AI-powered features
• Identify and mitigate AI-specific threats, including prompt injection, jailbreak techniques, model poisoning, data contamination, adversarial attacks, training data leakage, insecure model serialization, and excessive permissions in AI agents
• Develop guardrails, content filters, and output validation mechanisms
• Implement monitoring for anomalous AI behavior
• Integrate AI security checks into CI/CD pipelines
• Perform security reviews of ML code and AI-related infrastructure
• Secure model registries and artifact storage
• Collaborate with engineering and platform teams to enforce security standards
• Ensure AI systems comply with GDPR, data privacy regulations, and financial industry regulatory requirements
• Implement controls for sensitive data used in training and inference
• Perform AI risk assessments aligned with internal risk methodology
• Contribute to AI security standards and internal policies
• Define AI risk classification and control frameworks
• Support security reviews for new AI initiatives and tools

Требования:

• 3–5+ Years of experience in software engineering, ML engineering, or application security
• Hands-on experience with AI/ML systems, including LLMs, NLP models, or similar
• Python proficiency for automation and scripting
• Experience working with Claude Code
• Strong understanding of AWS, Azure, or GCP
• Experience with API security, Docker, and Kubernetes
• Knowledge of AI-specific security risks and mitigations
• Experience conducting threat modeling and risk assessments
• Strong analytical and problem-solving skills
• Ability to translate technical risk into business impact
• Ability to explain AI security risks and mitigations to non-security teams
• Cross-functional collaboration with ML, data, and product teams
• Clear documentation and communication skills

Nice to have:

• familiarity with RAG architectures, vector databases, and ML pipelines including MLflow, Kubeflow, or SageMaker
• experience in fintech or regulated environments
• knowledge of AI governance frameworks including EU AI Act, NIST AI RMF, or ISO/IEC 42001
• experience with AI red teaming
• cybersecurity or application security background including OWASP and Secure SDLC

Условия:

• Competitive salary
• Annual leave
• Employee referral program
• Medical insurance and pension plans
• Location-specific benefits and perks
• 30 Extra days to work remotely from anywhere in the world, with some restrictions
• Two additional paid volunteer days per year