Senior Security Engineer - AI Security

Integrate security across our engineering teams at low friction and high impact through agentic AI.

About Kiwi.com

Kiwi.com is a leading global travel-tech company headquartered in the Czech Republic. Our innovative algorithm enables users to find better route options and prices other search engines can’t see, daily performing billions of price checks across 95% of global flight content. Are you bold, bright and curious? Join a global business that’s still got a start-up heart.

About our Security Engineering Team

In our Kiwi.com Security Engineering team, we build intelligent systems that embed security into every layer of our product and infrastructure across Trust and Resilience, Security Engineering, and AI and Automation. Agentic AI is how we make security frictionless for engineering. We remove noise from telemetry, pinpoint high-value security actions, and deploy agents to integrate security controls seamlessly into development workflows. Engineers move fast. Security moves with them.

What you will do

You will design and deploy agentic AI systems that seamlessly integrate security into engineering workflows, enabling automated policy enforcement and frictionless compliance.

You will own the development, maintenance, and continuous improvement of our internal security agents and automation platform, measuring success on engineer adoption and security impact per interaction.

By defining risk-based telemetry and alerting, you will cut through signal noise to guide engineering teams toward high-impact security decisions without drowning them in alerts.

You’ll own cloud security posture across our infrastructure, driving hardening, automated remediation, and continuous monitoring via cloud security posture management tooling.

You will build internal tools and SDKs that make security automation and agentic systems accessible across product and infrastructure teams, integrating with endpoint protection, vulnerability management, identity tooling, and GRC platforms for centralized program governance and policy-as-code for agents

You’ll provide technical guidance to product and infrastructure teams on building and operating agents safely at scale across the organization.

You will partner directly with engineering leadership to turn security gaps into low-friction, agent-driven improvements that engineers want to use.

What you will need

Significant hands-on experience building, deploying, and maintaining agentic AI systems in production. Experience with agent frameworks, orchestration, and reasoning loops is essential.

Proven track record building agents across security domains: vulnerability assessment, policy enforcement, access management, or compliance automation.

Deep expertise in platform infrastructure, cloud-native systems (AWS or GCP), and the security challenges of developer platforms and high-velocity product companies.

Experience integrating and automating across security tools like endpoint protection suites (SentinelOne, CrowdStrike or equivalent), cloud security posture management (Orca, Wiz or equivalent), vulnerability management, and identity platforms.

Previous experience in risk-based telemetry filtering, cutting signal from noise to drive actionable prioritization.

Advanced proficiency in a systems language (Python, Go, or Rust) with experience building maintainable, production systems.

You thrive in an environment requiring incident response and on-call rotation participation to investigate live security events and endpoint breaches.

Strong written and verbal communication skills in English, with the ability to articulate complex technical decisions to diverse stakeholders.

We offer you

We offer a hybrid and flexible work environment. A lovely, modern office in the center of Barcelona (Passeig de Gracia) with great views and amenities.