Senior Security Engineer (AI)

Sopra Steria is one of the largest players in the tech industry in Europe, known for consulting, digital services, and software development. The Polish branch operates in Katowice since 2007 as a Global Delivery Center with around 1,000 specialists. Teams specialize in cloud, operating systems, virtualization, databases, backup, storage, networking, security, software development, data engineering, testing, CRM, ITSM, and ERP platform integrations serving customers in Scandinavia, Benelux, France, Germany, Switzerland, and the UK.

• Minimum 2 years of experience in Cyber Security.
• Hands-on experience in Application Security, Offensive Security, DevSecOps, or Security Testing.
• Experience assessing security of web applications, APIs, and modern application architectures.
• Basic or advanced understanding of AI security concepts.
• Knowledge of threats affecting LLM and Generative AI systems.
• Understanding of attack techniques targeting AI models and LLM-based systems.
• Knowledge of protection mechanisms for AI models, data, and AI agents.
• Interest in AI Governance and AI Risk Management.
• Application Security knowledge including Web Application Security (OWASP Top 10, API Security), Secure Software Development Lifecycle (SSDLC), Security Testing (manual, code reviews, SAST, DAST).
• Network Security knowledge including network protocols, communication security, segmentation, and access control.
• DevSecOps experience with CI/CD Security, Software Supply Chain Security, Dependency Management, and Software Bill of Materials (SBOM).
• EU citizenship.
• Fluent English (B2/C1).
• Willingness to commute to Katowice or Gdańsk offices and occasional business trips abroad.

Nice to have:

• Experience with GenAI, LLMs, Agentic AI, RAG, or MCP.
• Penetration Testing experience.
• Red Teaming experience.
• Security Research experience.
• Security certifications such as OSCP, OSWE, CISSP, GWAPT, GWEB, CARTA.

AI Security Research and Knowledge Development:

• Monitor trends, emerging threats, and attack techniques targeting AI and LLM-based systems.
• Analyze new tools, frameworks, and solutions that support AI security.
• Conduct technical research including proof-of-concept development, laboratory testing, and offensive security testing.
• Evaluate new AI Security technologies and recommend adoption.

AI Security Assessments:

• Analyze architecture of AI-powered systems.
• Identify risks associated with AI models, AI agents, LLMs, RAG, MCP, and other AI components.
• Assess resilience against attacks such as Prompt Injection, Jailbreak, Data Exfiltration, Model Abuse, Tool Abuse, and Supply Chain Attacks.
• Recommend security controls and architectures for projects.

Standards and Documentation Development:

• Develop guidelines, standards, and best practices for AI Security.
• Support implementation of secure design patterns.
• Contribute to security recommendations for clients and teams.
• Create training and educational materials.

Knowledge Sharing:

• Organize workshops, presentations, and knowledge-sharing sessions.
• Support the AI Security community within the organization.
• Provide consulting and guidance to Application Security, DevSecOps, and Architecture teams.
• Promote awareness of risks associated with AI technologies.

Only candidates located in Poland with EU citizenship and willing to commute to Katowice or Gdańsk offices are eligible.