Senior Application Security Engineer
Remote Poland, PolskaLuxoft
Wynagrodzenie do ustalenia
Oferujemy
Global Relocation - (Relocation options; Experience in an international environment; Cross-cultural experience)
Recognition and Evaluation - (Feedback culture; Regular appraisals)
Time Off - (Annual holiday - 20 or 26 days. The duration of the leave depends on the overall seniority; Occasional leave - 1 or 2 days/ depending on the circumstances; Child care leave - 2 days or 16 hours per year; Absence due to force majeure - 2 days or 16 hours per year; Maternity Leave - 20 weeks; Parental Leave - 41 weeks; Paternity Leave - 14 days)
Luxoft Training Center - (Expert-led tech courses covering basic to advanced topics; Internal instructor-led soft skills courses; Comprehensive in-house self-learning resources for both soft and hard skills; Access to external self-learning libraries like ProQuest eBook and Udemy for Business; Cloud Programs: MS Cloud Academy, AWS Partner Academy, Google Cloud Academy; Custom Learning Programs: upskilling, reskilling, technical mentorship; Leadership Programs for Managers)
Well-being and Work-life Balance - (Multisport card; Possibility to order Multisport card at the corporate rate for family members; LuxGood Program: wellbeing seminars, contests, relaxation sessions, yoga sessions, etc.; One Team Program: Buddy for each New Joiner; seminars, meeting and workplace space to support integration with local community and culture; “Hire me” workshops for partners; Preferential banking offer; Preferential car leasing offer; Cafeteria program discounts for shops, cinema tickets, holiday offers; Luxoft Social Benefit Fund: sport and recreation benefits, the possibility to receive financial support)
Health Care - (Private Healthcare Insurance with unlimited access to specialists; Full dental support; Travel Insurance; Possibility to add private healthcare coverage for family members at the corporate rate; Life insurance at the corporate rate for employees and family members, including payment of the basic package for the employee by the employer; Reimbursement for corrective glasses)
Company Events and Friendly Environment - (Many fun social activities organized by the Luxoft team offline in your city; Online entertainment events for whole company and local team events; A workplace where you’re treated with respect within a multicultural team)
Internal Mobility - (Rotation between projects and accounts; New career opportunities)
Self-Learning Library
CSR Projects
Other
Languages: English: B2 Upper Intermediate
Seniority: Senior
Wymagania
5+ years in Application Security, with at least 1-2 years focused on AI/ML security
Strong secure coding and vulnerability management background (OWASP Top 10)
Experience with cloud platforms (AWS and/or Azure)
Strong programming skills in Python or Java
Familiarity with AI platforms such as Amazon Bedrock, SageMaker, or Spark
Strong communication skills
Good knowledge of Microsoft Active Directory services
Firewall and security group administration practical experience.
Good understanding of AICPA SOC2 controls and processes.
Thorough knowledge of network security and protocols.
Knowledge of cryptography protocols and hands-on experience in SSL certificates generation.
Penetration testing hands-on experience in Azure and AWS cloud environments and Kubernetes clusters.
Web and desktop applications penetration testing hands-on experience.
Zakres obowiązków
Application Security with strong AI/ML security exposure
Threat modeling and risk assessment for AI systems, APIs, and cloud-native applications
Protection against prompt injection, adversarial ML, data poisoning, and model abuse
Secure SDLC and CI/CD integration, including MLOps pipelines
Hands-on experience with SAST, DAST, SCA, container scanning, and security automation
Strong collaboration with development and data science teams
Opis
One of the world's largest providers of products and services to the energy industry has a need to develop, support and integrate software system in Oil & Gas domain. You will be a member of a cross functional team. Key project stakeholders are open for innovative ideas. Project is based on SCRUM methodology. This is a great opportunity to work in an international team, apply and learn modern IT technologies Application Security with strong AI/ML security exposure Threat modeling and risk assessment for AI systems, APIs, and cloud-native applications Protection against prompt injection, adversarial ML, data poisoning, and model abuse Secure SDLC and CI/CD integration, including MLOps pipelines Hands-on experience with SAST, DAST, SCA, container scanning, and security automation Strong collaboration with development and data science teams 5+ years in Application Security, with at least 1-2 years focused on AI/ML security Strong secure coding and vulnerability management background (OWASP Top 10) Experience with cloud platforms (AWS and/or Azure) Strong programming skills in Python or Java Familiarity with AI platforms such as Amazon Bedrock, SageMaker, or Spark Strong communication skills Good knowledge of Microsoft Active Directory services Firewall and security group administration practical experience. Good understanding of AICPA SOC2 controls and processes. Thorough knowledge of network security and protocols. Knowledge of cryptography protocols and hands-on experience in SSL certificates generation. Penetration testing hands-on experience in Azure and AWS cloud environments and Kubernetes clusters. Web and desktop applications penetration testing hands-on experience. Global Relocation - (Relocation options; Experience in an international environment; Cross-cultural experience) Recognition and Evaluation - (Feedback culture; Regular appraisals) Time Off - (Annual holiday - 20 or 26 days. The duration of the leave depends on the overall seniority; Occasional leave - 1 or 2 days/ depending on the circumstances; Child care leave - 2 days or 16 hours per year; Absence due to force majeure - 2 days or 16 hours per year; Maternity Leave - 20 weeks; Parental Leave - 41 weeks; Paternity Leave - 14 days) Luxoft Training Center - (Expert-led tech courses covering basic to advanced topics; Internal instructor-led soft skills courses; Comprehensive in-house self-learning resources for both soft and hard skills; Access to external self-learning libraries like ProQuest eBook and Udemy for Business; Cloud Programs: MS Cloud Academy, AWS Partner Academy, Google Cloud Academy; Custom Learning Programs: upskilling, reskilling, technical mentorship; Leadership Programs for Managers) Well-being and Work-life Balance - (Multisport card; Possibility to order Multisport card at the corporate rate for family members; LuxGood Program: wellbeing seminars, contests, relaxation sessions, yoga sessions, etc.; One Team Program: Buddy for each New Joiner; seminars, meeting and workplace space to support integration with local community and culture; “Hire me” workshops for partners; Preferential banking offer; Preferential car leasing offer; Cafeteria program discounts for shops, cinema tickets, holiday offers; Luxoft Social Benefit Fund: sport and recreation benefits, the possibility to receive financial support) Health Care - (Private Healthcare Insurance with unlimited access to specialists; Full dental support; Travel Insurance; Possibility to add private healthcare coverage for family members at the corporate rate; Life insurance at the corporate rate for employees and family members, including payment of the basic package for the employee by the employer; Reimbursement for corrective glasses) Company Events and Friendly Environment - (Many fun social activities organized by the Luxoft team offline in your city; Online entertainment events for whole company and local team events; A workplace where you’re treated with respect within a multicultural team) Internal Mobility - (Rotation between projects and accounts; New career opportunities) Self-Learning Library CSR Projects Languages: English: B2 Upper Intermediate Seniority: Senior Languages: English: B2 Upper Intermediate Seniority: Senior