Senior AI-Native Software Engineer (Application Security)

About the role

AltexSoft is an AI-powered software engineering company. You'll join a long-running engagement with an enterprise software vendor as the security owner for one of its product lines. The products run inside customer environments with high security demands, so a vulnerability report is never only a ticket: it is a fix, a release, and often a conversation with a customer or an external researcher.

Project

You fix vulnerabilities in real enterprise products, and you use AI to do it faster than a security team usually can. We're looking for an engineer who writes production code and thinks like an attacker, and who already works with AI agents as the default, not as an experiment.

Responsibilities

• Own security issues for a product line end to end, as its Security Champion: from the incoming report to a validated fix in a release.
• Investigate, reproduce and prioritise vulnerabilities from customers, scanners, pen tests and independent researchers. Plan remediation by real exploitability and risk, not by score alone.
• Find root causes in large, unfamiliar codebases and ship the fix yourself. Coordinate the work when a fix crosses components or teams.
• Build internal tools and AI-assisted workflows for triage, remediation, testing and validation.
• Work with architects on secure design patterns and guardrails, and coach engineering teams on secure development.
• Support customer security reviews and coordinated vulnerability disclosure. Explain findings clearly to engineers, product managers, leaders, customers and researchers.

Requirements

• 5+ years of production software engineering in at least one of Go, Python, C#, or JavaScript/TypeScript.
• Hands-on experience finding, validating and prioritising application security vulnerabilities in code you did not write.
• Working knowledge of OWASP Top 10, CWE, CVSS and exploitability analysis; secure design and threat modelling.
• Debugging complex production systems, not only test environments.
• Daily, recent use of AI coding agents (Claude Code, Cursor, Copilot agent mode or similar) in real investigation or remediation work. Can show an example.
• Written and spoken English at a level where you can explain a vulnerability to a customer's security team.

Nice to have

• Experience as a Security Champion or technical security lead.
• Hands-on work with SAST, DAST, SCA, dependency analysis or container-security tooling.
• Coordinating pen tests or a vulnerability disclosure programme.
• Familiarity with OWASP SAMM or a similar maturity model.
• Internal tools or AI workflows built for a security process (triage bots, MCP servers, eval harnesses).
• Experience with CVE lifecycle and dependency updates on mature or legacy products.

Work-life Balance

• Possibility to work remotely

Health Care

• Reimbursement of medical expenses
• Online morning exercise

Education

• Compensation for trainings, seminars, conferences
• Free access to the Pluralsight and ACloudGuru knowledge base
• Access to the AltexSoft library with top-notch materials
• A mentor for a probation period
• Engagement in our Mentorship Hub program as a mentor or a mentee to foster professional growth and development

Development

• Horizontally - master new technologies at internal courses
• Vertically - choose your own career path through Competency trees

Recognition Program

• All your activities are marked by points that can be exchanged for gifts to fit any taste.