AI Engineer - Security

Automate endpoint hardening and human risk management across our workforce through AI agentic systems.

About Kiwi.com

Kiwi.com is a leading global travel-tech company headquartered in the Czech Republic. Our innovative algorithm enables users to find better route options and prices other search engines can’t see, daily performing billions of price checks across 95% of global flight content. Are you bold, bright and curious? Join a global business that’s still got a start-up heart.

About our Security Engineering team

In our Kiwi.com Security Engineering team, we build intelligent systems that embed security into every layer of our product and infrastructure across Trust and Resilience, Security Engineering, and AI and Automation. Agentic AI is how we make security frictionless for engineering. We remove noise from telemetry, pinpoint high-value security actions, and deploy agents to integrate security controls seamlessly into development workflows. Engineers move fast. Security moves with them.

What you will do

You’ll design agentic systems to autonomously triage, remediate and resolve first-response security findings, including phishing, user behavior anomalies, and risky device states.

Build, deploy and enforce endpoint security baselines across macOS, Windows, iOS, and Android using MDM and endpoint protection tools to secure configurations at scale.

You will own the intelligence layer, triage logic and feedback loops for security AI agents, enabling them to continuously learn from detection telemetry and escalate complex cases intelligently.

You will automate admin-heavy security workflows, such as policy updates, software patching, compliance checks, incident response, and device offboarding—eliminating manual intervention.

You’ll build partnerships and coordinate agent-driven automations across HR, Finance, Legal, and People Ops to streamline vendor risk assessments, access control, and compliance questionnaire responses.

You will drive team efficiency and visibility for security work, participate in sprint planning, and take responsibility for one internal tool or a small platform project.

By monitoring endpoint security metrics, you will continuously iterate on security baselines to reduce time-to-remediation, improve policy compliance, and elevate user security awareness.

What you will need

Strong foundational knowledge of endpoint security across Windows, macOS, iOS, and Android platforms.

Hands-on experience with mobile device management platforms (Intune, Jamf, or similar) and endpoint protection tools (SentinelOne, CrowdStrike or equivalent).

Proven track record in building automation and scripts (Python, Bash, PowerShell) to deploy and manage security configurations at scale.

Understanding of human risk management: phishing attacks, social engineering, user behavior analysis, and security awareness.

Familiarity with security baselines and hardening standards (CIS Benchmarks, Apple Security Recommendations, NIST guidelines)

Driven by a strong curiosity for agentic AI and intelligent automation.

You thrive in an environment requiring incident response and on-call rotation participation to investigate live security events.

Strong written and verbal communication skills in English, with the ability to explain security concepts to non-technical audience.

We offer you

We give our employees the freedom to choose between the environment of work from home and our modern office located in ZET Nová Zbrojovka with an in-house gym, masseur, sleeping spots, canteen, showers, chillout zones, free refreshments, Rebelbeans coffee, garage for cars/motorbikes/bicycles.