Senior Security Engineer (AI)

Soprasteria1; Katowice; On-site; PLN 180,000 - 240,000; Full time

Benefits offered by this job

Luxmed

Medicover Sport

Worksmile

Education platforms

Languages learning platform

Referral bonus

Life insurance

Certifications paid by company

Conferences

Tech Lunches

Communities (Security, AI and Cloud)

Local kindergarten

Job summary

Sopra Steria Polska seeks a Senior Security Engineer (AI) to develop AI security capabilities across Sopra Steria Group. You will analyze threats related to AI, investigate technologies, and recommend security controls for projects.

You will monitor trends, conduct research, and create documentation for project teams and security communities. Must-have experience covers Application Security, DevSecOps, and Security Testing; familiarity with AI governance and risk topics is valued.

Qualifications

• Experience in cyber security, application security, and DevSecOps.
• Hands-on security testing of web apps and APIs.
• Knowledge of AI security concepts and guardrails.

Responsibilities

• AI security research and development of security practices.
• Perform AI security assessments on systems and models.
• Develop guidelines and training materials for secure AI usage.
• Share knowledge through workshops and community involvement.

Skills

Cyber Security

Application Security

DevSecOps

Security Testing

OWASP Top 10

API Security

SSDLC

SAST

DAST

SBOM

Threat Modeling

Team Collaboration

Job description

We are looking for Senior Security Engineer (AI) to join Sopra Steria Polska a team that works for the internal team supporting Sopra Steria France, we are looking for a professional who will be responsible for developing the organization's AI Security capabilities across Sopra Steria Group. You will actively analyze security threats related to artificial intelligence, investigate emerging security solutions, assess your effectiveness through testing, and recommend best practices and security controls for projects delivered by the company.

The person in this position will monitor market trends, conduct independent technical research, produce documentation, and share knowledge with project teams and the wider security community.

Note that we can only offer cooperation to people who are located in Poland, have EU citizenship and are willing to commute to our office in Katowice or Gdańsk, Poland.

Responsibilities

AI Security Research and Knowledge Development

• Monitor trends, emerging threats, and attack techniques targeting AI and LLM-based systems.
• Analyze new tools, frameworks, and solutions that support AI security.
• Conduct technical research activities, including proof-of-concept development, laboratory testing, and offensive security testing.
• Evaluate new AI Security technologies and recommend their adoption where appropriate.

AI Security Assessments

• Analyze the architecture of AI-powered systems.
• Identify risks associated with the use of AI models, AI agents, LLMs, RAG, MCP, and other modern AI components.
• Assess the resilience of solutions against attack techniques such as Prompt Injection, Jailbreak, Data Exfiltration, Model Abuse, Tool Abuse, and Supply Chain Attacks.
• Recommend security controls and security architectures for both existing and new projects.

Standards and Documentation Development

• Develop guidelines, standards, and best practices in the field of AI Security.
• Support project teams in implementing secure design patterns.
• Contribute to security recommendations for clients and project teams.
• Create training and educational materials.

Knowledge Sharing

• Organize workshops, presentations, and knowledge-sharing sessions.
• Support the development of the AI Security community within the organization.
• Provide consulting and guidance to Application Security, DevSecOps, and Architecture teams.

Promote awareness of risks associated with the use of AI technologies.

Must have requirements

• Minimum of 2 years of experience in Cyber Security.
• Hands-on experience in Application Security, Offensive Security, DevSecOps, or Security Testing.
• Experience in the security assessment of web applications, APIs, and modern application architecturs.
• Basic or advanced understanding of AI security concepts.
• Knowledge of threats affecting LLM and Generative AI systems.
• Understanding of attack techniques targeting AI models and LLM-based systems.
• Knowledge of protection mechanisms for AI models, data, and AI agents.
• Interest in AI Governance and AI Risk Management topics.
• Application Security: Web Application Security (OWASP Top 10, API Security), Secure Software Development Lifecycle (SSDLC) , Security Testing (manual security testing, code reviews, SAST, DAST).
• Network Security: Network protocols and communication security, Network segmentation and access control.
• DevSecOps: CI/CD Security, Software Supply Chain Security. . Dependency Management and Software Bill of Materials (SBOM, experience in cooperating with clients)
• EU citizenship.
• Fluent English B2/C1
• Being open to occasional business trips abroad and visits in our office in Katowice or Gdańsk

We are particularly interested in candidates who: Demonstrate a strong willingness to learn and continuously expand their knowledge independently.

Have a genuine interest in emerging technologies and actively follow the latest trends in cybersecurity.

Are proactive, self-motivated, and comfortable working in a fast-paced environment driven by rapidly evolving technologies.

Nice to have requirements

• Experience with GenAI, LLMs, Agentic AI, RAG, or MCP.
• Experience in Penetration Testing.
• Experience in Red Teaming.
• Experience in Security Research.
• Security-related certifications (e.g., OSCP, OSWE, CISSP, GWAPT, GWEB, CARTA, etc.).

What we offer

• BENEFITS (UoP): Luxmed, Medicover Sport, Worksmile, educational platforms, languages learning platform, referral bonus, life insurance, certifications (paid by the company), conferences, Tech Lunches, possibility to join our Communities (Project Management, Architecture, Security, Process Management, Leadership, AI and Cloud), local kindergarten.
• DEVELOPMENT OPPORTUNITIES (B2B): Tech Lunches, Worksmile, possibility to join our Communities (Project Management, Architecture, Security, Process Management, Leadership, AI and Cloud).
• ADDITION: free parking, fresh fruits, workation.

In case of questions, please contact the HR team.

The recruitment process in our company consists of 3 stages: a short phone call with a recruit