Security Engineer

• Work on security assessment and secure design review of AI, LLM and agentic systems across InPost's technology estate
• Identify, reproduce and reason about real vulnerabilities in AI-powered and agentic systems
• Work with engineering teams to fix vulnerabilities at the root cause
• Define and build engineered security controls for AI/ML and LLM-related risks
• Build security automation and developer-facing tooling to help teams build securely by default
• Review new AI solutions and system architectures for security risk
• Represent security in AI governance forums and the AI solutions catalogue
• Apply hands-on cloud and container security practices across AWS, Azure and GCP
• Act as a go-to expert on AI-specific attack classes and evolving threats
• Translate complex technical and security findings into clear, practical guidance for business stakeholders

AI Security Engineer

• Develop skills to become a subject matter expert in Workday Security and participate in design and modification efforts for continual system alignment with business objectives
• Perform Workday administrative functions relating to Workday Security
• Manage the Production and establish a well-controlled systems environment
• Provide end-user support, change management, and issue resolution
• Deliver HR services for over 50,000 colleagues worldwide as part of ING Hubs Poland’s technical Global HR team
• Cooperate daily with international stakeholders around the world

Workday Security/HCM Specialist

• Create new OpenGrep detection rules for novel malware and vulnerability patterns
• Extend support for new programming languages across the analysis pipeline
• Experiment with tools and techniques to detect threats and malware at scale
• Research exploitation and analysis of modern web applications and APIs
• Build proof-of-concept attacks and translate findings into shippable capabilities
• Research vulnerability classes, exploitation techniques, cloud-native attack paths, and AI-specific attack vectors
• Convert research into production-ready detections
• Contribute to research standards, policies, and attack methodologies
• Build attack chain templates combining low-severity findings into high-impact exploitation paths
• Design and maintain evaluation harnesses, testing frameworks, and benchmarking systems
• Measure detection effectiveness, exploit reproducibility, false-positive rates, and coverage
• Contribute to internal research and shape the public research agenda
• Write and publish blog posts on novel attacks and large-scale incidents
• Represent Invicti in the security community through CVEs, tool releases, and conference contributions
• Monitor AppSec, AI red-teaming, offensive AI, LLM vulnerabilities, agent security, MCP security, and cloud-native attack trends
• Triage analysis-pipeline packages and validate findings
• Mentor junior and mid-level researchers
• Collaborate with engineering, product, AI/ML, and infrastructure teams
• Partner with platform and infrastructure teams to improve CI/CD and cloud-native security automation
• Maintain detection quality by triaging difficult or ambiguous findings

Staff Security Researcher – Europe

• Review solution concepts, architectures, and technical documentation to identify applicable security standards, security risks, and required controls
• Conduct Security Architecture Reviews, Cloud Security Assessments, and Vendor Security Assessments
• Evaluate solutions across IAM, network architecture and segmentation, authentication and authorization, encryption and data protection, logging and monitoring, and security controls and risk management
• Assess firewall, proxy, server internet access, and connectivity-related requests, considering business requirements, communication flows, security controls, monitoring, and data processing implications
• Provide clear, actionable security recommendations to technical and non-technical stakeholders
• Prepare architecture review reports and security assessment documentation
• Support security governance activities by advising on security standards, policies, and best practices
• Collaborate with project teams to implement and improve secure architecture patterns
• Contribute to continuous improvement of security review methodologies, assessment frameworks, and documentation standards

Security Architect, Cybersecurity

• Own the end-to-end cloud security architecture and strategy across the company
• Architect and enforce a unified multi-cloud security strategy across Azure, AWS, and GCP, covering IAM, network security, and secrets management
• Embed automated policy-as-code guardrails in Terraform and CI/CD pipelines using OPA, Sentinel, and Azure Policy
• Own Kubernetes (AKS) cluster security, including RBAC, network policies, pod security standards, and admission controls
• Drive vulnerability and posture management through the CNAPP platform and manage findings to closure under strict SLAs
• Integrate automated SAST, DAST, SCA, and secret scanning into CI/CD workflows
• Lead cloud security incident response, conduct post-mortems, and implement preventive measures
• Collaborate with DevOps, MLOps, and FinOps teams to embed security baselines into development workflows
• Manage customer security assessments and technical questionnaires with Sales and Legal stakeholders

Cloud Security Engineer

• Define security architectures and provide pragmatic security guidance balancing business benefits and risks
• Evaluate and prescribe security controls throughout technology architectures
• Define security configuration standards for platforms and technologies
• Provide knowledge sharing and technical assistance to team members
• Act as a subject matter expert for responsible technologies and portfolios
• Perform information-system and infrastructure risk assessments
• Maintain and enhance the Information Security risk assessment methodology
• Develop risk treatment and mitigation options for security risks identified during reviews or audits
• Translate technical vulnerabilities into business-risk terminology and recommend corrective actions
• Engage directly in delivery of programs and projects for EY’s Audit Technologies portfolio
• Facilitate information security services throughout the system development life cycle
• Direct technology teams in implementing risk treatment and vulnerability mitigation options

InfoSec Security Consultant

• Partner with engineering and product leadership across GitLab to anticipate security problems
• Lead security architecture and design work for strategic initiatives and direct cross-functional delivery teams
• Identify, assess, and prioritize systemic security risks
• Act as Security Owner for high-priority Product Security Risk Register items and co-execute remediation
• Codify security decisions into reusable guardrails, standards, design patterns, skills, and threat models for developer and AI coding workflows
• Build proofs of concept and prototypes to unblock engineering teams
• Conduct security architecture reviews for large or strategic projects
• Coordinate with Application Security to prioritize comprehensive review coverage
• Threat model new and existing systems and establish reusable threat-modeling patterns
• Work with Security Research to explore unknown architectural risks
• Anticipate emerging security challenges and propose architectural responses
• Mentor security engineers and represent security architecture to engineering audiences

Staff Product Security Architect

• Own the technical aspects of integrating Akamai Security Solutions, including configuration, debugging, documentation, testing, and go-live
• Analyze customer traffic, systems, and customize Akamai security solutions to address customer security issues
• Perform BGP FlowSpec, ACL design, traffic baseline profiling, GRE/IPsec tunneling, and network topology analysis
• Ensure anti-DDoS solutions are correctly configured and provisioned for customers
• Collaborate with cross-functional project teams to scope work, set timelines, create technical solutions, and support ongoing implementation
• Create innovative security solutions for global customers
• Participate in ongoing training initiatives

Network Provisioning Engineer – Security Architect

• Participate in cybersecurity engagements across Penetration Testing, OT Security, Cyber Risk & Compliance, Data Protection & Privacy, and Identity & Access Management
• Collaborate with clients and project teams to identify security risks, define mitigation strategies, and support security improvements
• Conduct security assessments, reviews, testing activities, and compliance evaluations
• Support the design, implementation, and enhancement of cybersecurity processes, controls, and governance frameworks
• Analyze technical and business requirements and translate them into practical security solutions
• Contribute to security architecture reviews, risk analysis activities, and control validation exercises
• Prepare reports, documentation, and presentations for technical and non-technical stakeholders
• Participate in workshops, proof-of-concepts, and cybersecurity transformation initiatives
• Collaborate with global teams to identify emerging threats, best practices, and innovative security solutions
• Support post-assessment reviews and continuous improvement initiatives

Cybersecurity Team – Pentesting, OT Security, CRCR, DPP, IAM

• Build product security across the engineering organization
• Build the product security practice and report to the Head of Information Security
• Embed security into the software development lifecycle from architecture and design through build, deployment, and remediation
• Introduce security gates, secure release practices, and guardrails into engineering workflows
• Select and operate application security tooling
• Use AI and automation to increase security coverage without slowing product delivery
• Lead threat modelling for new products and major changes
• Provide secure-by-design input for products involving card issuing, embedded finance, banking-as-a-service, and other payment products
• Define secure-by-default application architecture patterns for authentication, authorization, API design, and service-to-service trust
• Evaluate traditional tooling versus AI-assisted alternatives
• Own CI/CD pipeline and software supply-chain security controls
• Implement and improve container image scanning, dependency management, software bills of materials, infrastructure-as-code checks, and deployment-manifest security checks
• Introduce AI agents and LLM-assisted workflows as the default application-security delivery mechanism
• Drive remediation of application-layer findings with engineering teams, including penetration-test, scanner, and disclosure-report findings

Security Engineer jobs in Poland