Назад
Company hidden
2 дня назад

Senior Security Engineer (AI)

Формат работы
remote (только Czech_republic)/hybrid
Тип работы
fulltime
Грейд
senior
Английский
b2
Страна
CR
Вакансия из списка Hirify.GlobalВакансия из Hirify Global, списка международных tech-компаний
Для мэтча и отклика нужен Plus

Мэтч & Сопровод

Для мэтча с этой вакансией нужен Plus

Описание вакансии

Текст:
/
TL;DR
Senior Security Engineer (AI): Testing and securing a web automation platform, AI agents, MCP servers, cloud infrastructure, and software supply chains with an accent on offensive security, vulnerability research, and AI-assisted testing. Focus on exploiting complex web, API, AWS, and LLM attack paths, automating security workflows, and turning findings into detections and incident-response support.

Location: Czechia; hybrid, with an option to work fully remotely. Offices are located in Prague and Brno.

Company

hirify.global operates a marketplace of trusted tools for AI that automate work on the web, managing infrastructure, billing, and distribution for a global community of builders.

What you will do

  • Conduct offensive testing of the multi-tenant platform, Actor sandboxes, proxy, API, Console, AI agents, MCP servers, supply chain, CI/CD, and AWS environments.
  • Use AI tools for penetration testing, reconnaissance, code review, exploit development, and security research.
  • Research vulnerabilities, attack techniques, and threat activity; assess risks and act on findings.
  • Threat-model new features and architecture, and triage, reproduce, rate, and manage vulnerabilities through remediation SLAs.
  • Build automation for triage pipelines, code review, advisory monitoring, and attack tooling.
  • Hunt for compromise and platform abuse, create detections, and support incident response.

Requirements

  • 3+ years of experience in offensive security, penetration testing, security research, AppSec, or a closely related field.
  • Hands-on experience finding and exploiting web application and API vulnerabilities beyond OWASP Top 10 checklists.
  • Hands-on experience securing and breaking AWS environments, including IAM, CloudTrail, and GuardDuty.
  • Ability to write tools and automation in Python, Go, Bash, or similar languages.
  • Experience with Burp Suite or similar tools, vulnerability scanners, SAST/DAST, and GitHub security features.
  • Daily use of AI tools and understanding of attacks against LLMs and AI agents.
  • Active security-community engagement, research reading, clear communication of technical risks, and effective collaboration with engineers.
  • Self-starter mentality and ability to identify work independently.

Nice to have

  • Proficiency in Node.js/TypeScript.
  • Familiarity with SOC 2 or ISO 27001.

Culture & Benefits

  • Full-time position with hybrid work in Prague or Brno and an option for fully remote work.
  • Flexible working hours, autonomy, and support for personal growth.
  • Stock options, profit sharing, unlimited Claude, education and training budget, conference tickets, and hardware budget.
  • Unlimited holidays as long as work is completed, plus team offsites and cross-team opportunities.
  • Office benefits include free lunches, Multisport card, massages, snacks, drinks, and pet-, child-, and bike-friendly facilities.

Будьте осторожны

Если работодатель просит войти в их систему, используя iCloud/Google, прислать код/пароль, запустить код/ПО, не делайте этого. Это мошенники. Обязательно жмите «Пожаловаться» или пишите в поддержку. Подробнее в гайде →