Вакансия из Hirify Global, списка международных tech-компаний Для мэтча и отклика нужен Plus
Пожаловаться
Зарплата и рынок
ЗП не указанаразвернуть
На похожих ролях по рынку
$56к$62кмедиана$69к
9 в выборке
На СНГ рынке: $4к/мес ($3.7к - $5.5к)
91
Крутая вакансия
развернуть
Чётко описанная роль в offensive security в AI-продуктовой компании даёт возможность влиять на продукт и развивать программу безопасности, но в команде всего два человека, поэтому самостоятельности и ответственности будет много.
?Небольшая команда
Современная инфраструктура
Фокус на AI-безопасности
Бюджет на развитие
Гибкий график и отпуск
Мэтч & Сопровод
Для мэтча с этой вакансией нужен Plus
Подключить Plus
Описание вакансии
Текст:
Hirify AI/Оригинал
TL;DR
Senior Security Engineer (AI): Testing and securing a web automation platform, AI agents, MCP servers, cloud infrastructure, and software supply chains with an accent on offensive security, vulnerability research, and AI-assisted testing. Focus on exploiting complex web, API, AWS, and LLM attack paths, automating security workflows, and turning findings into detections and incident-response support.
Location: Czechia; hybrid, with an option to work fully remotely. Offices are located in Prague and Brno.
Company
hirify.global operates a marketplace of trusted tools for AI that automate work on the web, managing infrastructure, billing, and distribution for a global community of builders.
What you will do
Conduct offensive testing of the multi-tenant platform, Actor sandboxes, proxy, API, Console, AI agents, MCP servers, supply chain, CI/CD, and AWS environments.
Use AI tools for penetration testing, reconnaissance, code review, exploit development, and security research.
Research vulnerabilities, attack techniques, and threat activity; assess risks and act on findings.
Threat-model new features and architecture, and triage, reproduce, rate, and manage vulnerabilities through remediation SLAs.
Build automation for triage pipelines, code review, advisory monitoring, and attack tooling.
Hunt for compromise and platform abuse, create detections, and support incident response.
Requirements
3+ years of experience in offensive security, penetration testing, security research, AppSec, or a closely related field.
Hands-on experience finding and exploiting web application and API vulnerabilities beyond OWASP Top 10 checklists.
Hands-on experience securing and breaking AWS environments, including IAM, CloudTrail, and GuardDuty.
Ability to write tools and automation in Python, Go, Bash, or similar languages.
Experience with Burp Suite or similar tools, vulnerability scanners, SAST/DAST, and GitHub security features.
Daily use of AI tools and understanding of attacks against LLMs and AI agents.
Active security-community engagement, research reading, clear communication of technical risks, and effective collaboration with engineers.
Self-starter mentality and ability to identify work independently.
Nice to have
Proficiency in Node.js/TypeScript.
Familiarity with SOC 2 or ISO 27001.
Culture & Benefits
Full-time position with hybrid work in Prague or Brno and an option for fully remote work.
Flexible working hours, autonomy, and support for personal growth.
Stock options, profit sharing, unlimited Claude, education and training budget, conference tickets, and hardware budget.
Unlimited holidays as long as work is completed, plus team offsites and cross-team opportunities.
Office benefits include free lunches, Multisport card, massages, snacks, drinks, and pet-, child-, and bike-friendly facilities.
Будьте осторожны
Если работодатель просит войти в их систему, используя iCloud/Google, прислать код/пароль, запустить код/ПО, не делайте этого. Это мошенники. Обязательно жмите «Пожаловаться» или пишите в поддержку. Подробнее в гайде →