Lead Engineer AI/AppSec

Mindbox is a tech-driven company connecting top IT talents with technology projects for leading enterprises across Europe. Their Technology teams design and build digital services for a global bank, focusing on cybersecurity solutions that strengthen security and set best practices for thousands of engineers. The role is part of a specialized team working on innovative proof-of-concepts to embed security across the software development lifecycle globally.

• Proven experience leading delivery of complex, multi-component software systems with ownership of design and quality.
• Strong background in cybersecurity engineering, building or maintaining security tooling or scanning services.
• Deep knowledge of Python, including microservice design, async programming, and FastAPI or similar frameworks.
• Hands-on experience with GCP, Kubernetes, Helm, and Docker.
• Strong CI/CD pipeline experience, preferably Jenkins or equivalent.
• Expertise in secrets/configuration management, e.g., HashiCorp Vault.
• Solid skills in PostgreSQL and/or Redis, including schema design and performance tuning.
• Ability to lead technical design, document decisions, and explain solutions to technical and non-technical audiences.
• Comfortable working in Agile environments.

Nice to have:

• Familiarity with secret scanning tools (e.g., TruffleHog), async task frameworks (Celery, Kafka), and observability tooling (Splunk, OpenTelemetry).
• Frontend experience with Vue.js, React, TypeScript.
• Cloud or engineering certifications, e.g., GCP Professional.

• Leading the engineering of proof-of-concept and proof-of-value security solutions, building to standards that enable wider adoption.
• Designing and developing security tooling and scanning services with a clear understanding of their operational context.
• Driving code quality through rigorous reviews and actionable feedback.
• Owning and enforcing testing strategies (unit, integration, regression) and embedding quality gates in the CI/CD pipeline.
• Facilitating design discussions and producing clear architectural decision records (ADRs).
• Acting as the main technical unblocker, diagnosing complex issues and removing delivery impediments.
• Building and maintaining production-quality Python microservices on GCP and Kubernetes.
• Contributing to the codebase as a hands-on engineer while mentoring and developing other team members.
• Collaborating with global partner teams to align integrations and resolve technical dependencies.