Senior Security Engineer

Senior Security Engineer

AirHelp

Kraków, Gdańsk or Warsaw, Poland

What will you drive:

Based on your experience and background you will drive one or several domains from below:

• Secure AI Adoption - Design and implement the governance framework for AI agents and LLM-powered tools. Establish identity controls, access boundaries, and automated guardrails that allow autonomous systems to operate safely.
• Security Built Into Engineering - Partner deeply with engineers to embed automated security checks directly into CI/CD pipelines, creating a security-by-default environment without slowing delivery.
• Cloud & Edge Protection - Own security controls across AWS infrastructure and optimize Cloudflare (WAF, rate limiting, and bot mitigation) to safeguard users and systems at scale.
• Developer Enablement - Secure the entire developer ecosystem - from AI coding assistants to internal tooling, ensuring the inner development loop remains both fast and protected.
• Threat Modeling That Drives Action - Run assessments and vulnerability reviews that drive real change, prioritizing risks and delivering fixes that matter, especially for new AI-driven product features.
• Incident Leadership - Strengthen detection and response capabilities, reduce reaction times, and continuously elevate automated defense tooling.

What you’ll deliver in your first 12 months:

• Optimized Cloud Posture: Measurably strengthen our AWS security controls and infrastructure hardening.
• Advanced AI Guardrails: Successfully deploy automated security gates specifically designed to monitor and secure our internal and external AI tool usage (e.g., preventing prompt injection or data leakage).
• Hardened APIs: Raise the bar for application security by hardening critical web surfaces against common and emerging threats.
• Streamlined Automation: Launch new security automations that cut manual effort in detection and response workflows, boosting visibility and speed.
• Are you curious about firsthand experiences? Dive into our bonus material showcasing employees’ stories in the engineering team.PlayEnter fullscreenPlay

What sets you apart:

• 5+ Years of Security Impact: Proven experience in cloud-native, fast-moving environments (AWS) with a deep instinct for what matters in production.
• The "Developer First" Mindset: You have hands-on developer experience. You understand the pressures of a sprint and can speak the same language as our engineering teams to ensure security fixes are practical.
• AI & LLM: You understand the unique security implications of AI usage and know how to design and build gates to mitigate them.
• Automation & IaC: You are fluent in scripting (Python, Go, etc.) and Infrastructure as Code (Terraform) to scale defenses and reduce manual work.
• SDLC: Confident in owning CI/CD security, managing secrets, and integrating SAST/DAST tools seamlessly into the pipeline.
• Pragmatic Communication: You can translate complex security risks into clear guidance for everyone from junior devs to leadership, focusing on "How can we use this safely?" rather than "No."
• Operational Maturity: You have a solid grip on security operations. While we value your overall approach to defense, prior experience configuring and fine-tuning SIEM and XDR platforms to cut through noise and identify real threats will be a distinct advantage.
• Solid Grasp of Compliance: Knowledge of ISO 27001, GDPR, or SOC 2, handled with a focus on practical application rather than just paperwork.