Мы используем технические cookie и статистику посещений: Яндекс Метрику и собственный обезличенный журнал Zorky (cookie zk_aid). Не собираем содержимое форм, текст поиска и полный IP; данные не продаём. Отказаться можно кнопкой ниже, а также через Global Privacy Control или Do Not Track в браузере. Подробнее о cookie и статистике.
Zorky CRMZorky CRM
EN|RU
@termdocs
← Все вакансии

Lead AI Security Engineer

seniorremote2,000 USD · период не указанWarsaw, PLСкор 78/100сегодня
Аналитика рынка
📊 Security: зарплаты и спрос на рынке
Стек
Application Securitythreat modelingSecure Code ReviewSASTDASTCI/CDDevSecOpsAPI securitysecrets managementPrompt Engineeringagileaws
Откликнуться
Загрузите резюме — мы свяжем вас с работодателем напрямую через нашу базу.
Отправить резюме →
Описание
We are seeking a Lead AI Security Engineer to secure software across the full development lifecycle. This role embeds security into design, code, build and release; operates application security tooling and pipelines; partners with engineering to drive remediation; and applies AI both to accelerate AppSec work and to secure AI- and LLM-powered applications. Responsibilities Embed security into the full software development lifecycle and drive shift-left and secure-by-design practices across engineering teams Perform and facilitate threat modeling, architecture security reviews, and design reviews for applications, services, and APIs Conduct secure code reviews (manual and AI-assisted) and advise developers on secure coding patterns and remediation Implement, configure, tune, and operate application security tooling, including SAST, DAST, IAST, SCA, secrets scanning, and IaC scanning, integrated into CI/CD pipelines Triage, validate, prioritize, and reduce false positives in security findings, and partner with development teams to track issues through to remediation Define, implement, and maintain security gates and policies in CI/CD pipelines that balance risk reduction with developer velocity Secure the software supply chain, including dependency and open-source risk management, SBOM generation, artifact integrity and signing, and build pipeline hardening Support and coordinate application penetration testing and validate fixes for identified vulnerabilities Drive secrets ma
Контакты работодателя (email/phone/telegram) скрыты из публичного превью — отправьте резюме, чтобы мы связали вас напрямую.
Срочный вопрос? Напишите @termdocs