Senior Security Engineer (AI)

Sopra Steria is one of the largest players in the tech industry in Europe, known for its consulting, digital services and software development, operating in nearly 30 countries with over 55,000 employees. The Polish branch, operating in Katowice since 2007 as a Global Delivery Center, currently has around 1,000 specialists. The Digital Platform Services department specializes in cloud, operating systems, virtualization, databases, backup, storage, networking, and security. The Application Services department handles software development, data engineering, testing services, CRM, ITSM and ERP platform integrations, and application management for clients across Scandinavia, Benelux, France, Germany, Switzerland, and the UK.

• Minimum of 2 years experience in Cyber Security.
• Hands-on experience in Application Security, Offensive Security, DevSecOps, or Security Testing.
• Experience assessing security of web applications, APIs, and modern application architectures.
• Basic or advanced understanding of AI security concepts.
• Knowledge of threats affecting LLM and Generative AI systems.
• Understanding of attack techniques targeting AI models and LLM-based systems.
• Knowledge of protection mechanisms for AI models, data, and AI agents.
• Interest in AI Governance and AI Risk Management.
• Application Security knowledge: OWASP Top 10, API Security, Secure Software Development Lifecycle (SSDLC), Security Testing (manual, code reviews, SAST, DAST).
• Network Security knowledge: protocols, communication security, segmentation, and access control.
• DevSecOps knowledge: CI/CD Security, Software Supply Chain Security, Dependency Management, Software Bill of Materials (SBOM).
• EU citizenship.
• Fluent English B2/C1.
• Willingness for occasional business trips and visits to offices in Katowice or Gdańsk.

Nice to have:

• Experience with GenAI, LLMs, Agentic AI, RAG, or MCP.
• Penetration Testing experience.
• Red Teaming experience.
• Security Research experience.
• Security certifications such as OSCP, OSWE, CISSP, GWAPT, GWEB, CARTA.

AI Security Research and Knowledge Development:

• Monitor trends, emerging threats, and attack techniques targeting AI and LLM-based systems.
• Analyze new tools, frameworks, and solutions supporting AI security.
• Conduct research activities including proof-of-concept development, laboratory testing, and offensive security testing.
• Evaluate new AI Security technologies and recommend adoption.

AI Security Assessments:

• Analyze architecture of AI-powered systems.
• Identify risks related to AI models, AI agents, LLMs, RAG, MCP, and related components.
• Assess resilience against attacks like Prompt Injection, Jailbreak, Data Exfiltration, Model Abuse, Tool Abuse, and Supply Chain Attacks.
• Recommend security controls and architectures for projects.

Standards and Documentation Development:

• Develop guidelines, standards, and best practices in AI Security.
• Support project teams in secure design patterns.
• Contribute to client and project security recommendations.
• Create training and educational materials.

Knowledge Sharing:

• Organize workshops, presentations, and sessions.
• Support development of AI Security community.
• Provide consulting to Application Security, DevSecOps, and Architecture teams.
• Promote awareness of risks associated with AI technologies.

This offer is available only to candidates located in Poland with EU citizenship and willing to commute to Sopra Steria offices in Katowice or Gdańsk.