Application & AI Security Engineer

About the role

AdTech Holding, an innovation hub in Cyprus founded in 2011 that supports advertising and digital marketing startups, is hiring an Application and AI Security Engineer for its Security Department. The role covers security reviews, threat modelling, vulnerability management and securing AI integrations.

Key responsibilities

• Run security reviews of services, integrations and public APIs before production, including manual review of critical code.
• Do threat modelling for new features with product teams at the design stage.
• Own security checks in the development lifecycle (static analysis, dependency scanning, secret detection), covering coverage, rules and triage of findings.
• Build a unified vulnerability management process, including the vulnerability register, prioritization, SLAs, retesting and bug bounty.
• Secure AI integrations and define access policies for service and AI agent accounts.
• Run penetration tests and audits, scope them, accept the results and follow findings through to fixes.
• Develop and maintain developer standards and practices, including secure development requirements, guidelines and team training.

Required profile

• 3+ years of experience in application security, covering code and architecture reviews, SAST, DAST, SCA and OWASP.
• Strong manual testing skills and hands-on experience with static analysis, including writing custom rules.
• Solid understanding of authorization in practice: OAuth, OIDC, JWT, token scopes and delegated permissions.
• Ability to work with teams you do not manage directly, including through security champions.
• Interest in LLM application security, such as prompt injection and AI agents' access to data.
• Working proficiency in Russian and English.

Required skills

• Manual testing with Burp Suite or ZAP
• Static analysis, dependency scanning, secret detection, vulnerability management
• OWASP Top 10, OWASP API Security Top 10, OWASP Top 10 for LLM Applications, ASVS
• Ability to read PHP, Go and JavaScript code and to automate tasks in Python or Bash

Nice to have

• Experience in AdTech or other high-load environments
• DevSecOps experience
• Experience testing LLM applications
• Bug bounty or CTF experience
• OSWE or GWEB certification

What we offer

• A cafeteria benefits system where you choose your benefits
• Health insurance and fully covered 10 working days of sick leave per year
• 5 additional day-offs per year
• English and other languages compensation, quarterly and annual bonuses
• Corporate events, gifts, gym at the office and food in the offices