Senior AI & Application Security Engineer

Marcura; Poland; Hybrid; PLN 210,000 - 330,000; Full time

Benefits offered by this job

Competitive Salary & Bonus

Inclusive Onboarding

Wellness Zone

Global Opportunities

Diverse, Supportive Culture

Job summary

Marcura is seeking a Staff Security Engineer for AI & Application Security to establish and advance the security engineering function. The role spans offensive assurance, defensive engineering, secure architecture, and governance across apps, APIs, cloud infra, and AI models.

Responsibilities include direct testing, threat modelling, and defining secure by design patterns for LLM and agentic systems. The position emphasizes prioritisation, collaboration with product and data teams, and oversight

Qualifications

• 8+ years total experience in security engineering
• Hands on offensive experience: penetration tests & red teams
• Defensive engineering: hardening, detections, identity/access controls

Responsibilities

• Define and maintain a prioritised security roadmap
• Review architecture for secure design patterns
• Lead AI/LLM security strategy and governance
• Build an AI security framework aligned to OWASP LLM Top 10, MITRE ATLAS and NIST RMF
• Run internal penetration testing and manage external testing
• Own MDR partner relationship with eSentire
• Drive detection engineering and incident response capabilities
• Oversee vulnerability management lifecycle
• Develop security tooling and automation
• Ensure secure deployment and data protection controls
• Manage documentation, metrics and leadership reporting

Skills

Offensive security

Defensive engineering

AI/LLM security

Threat modeling

Education

Degree in Computer Science/Info Security/Engineering welcomed

Job description

Marcura is seeking a Staff Security Engineer for AI & Application Security to establish and advance the security engineering function. The role spans offensive assurance, defensive engineering, secure architecture, and governance across apps, APIs, cloud infra, and AI models.

Responsibilities include direct testing, threat modelling, and defining secure by design patterns for LLM and agentic systems. The position emphasizes prioritisation, collaboration with product and data teams, and oversight