Kong logo

Kong

More roles at Kong

Senior Security Engineer (Security Champion), Runtimes

Hybrid

Part remote, part office, you need to live within commuting distance of a named location.

Hybrid · Milan, Italy

Employer listed it 13 days ago · Added 10 days ago

First listed 13 days ago and still open.

Salary

€77k to €95k per year

Location

Hybrid · Milan, Italy

Timezone

Not stated

Contract

Full-time

Experience

Senior

Category

Software

Published by the employer

What the advert says

Quoted word for word from the employer's advert. Where it says nothing, we say so.

Working hours
Not mentioned in the advert
Where you can work from
Hybrid work from our Milan Hub at Talent Garden Isola, and a seat at the table where security decisions actually shape what millions of API calls run through every day.
Contract
A permanent contract under the CCNL Commercio (Quadro)
Experience asked for
Not mentioned in the advert
Pay
Not mentioned in the advert

Remote flexibility

Hybrid

This role is only partly remote, the employer expects time in the office around Milan, Italy, Hybrid, so you need to live within commuting distance.

What the employer says

  • Source listing states candidate location: "Milan, Italy, Hybrid"
  • Listing mentions "Hybrid"

What Nomaders makes of it

  • Not suitable if you plan to move between countries

The quotes above are the employer's own words; the reading is ours. Always check the original listing and employment terms before working from another country.

Before you apply

Questions worth asking: Nomaders interpretation

  • This role involves office time, but the advert does not say how often. Ask how many days a week are expected on site.

Produced automatically from this advert's text; not reviewed by a person. The employer's own page is the final word.

About the role

Are you ready to unlock intelligence?

If you don’t think you meet all of the criteria below but are still interested in the job, please apply. Nobody checks every box - we’re looking for candidates that are particularly strong in a few areas, and have some interest and capabilities in others.

About the Role :

At Kong, our API and AI Gateway sits at the center of how Fortune 500 enterprises and AI-native startups secure and govern the flow of intelligence.

Every request into a company's infrastructure goes through the Gateway first. Security isn't a side concern here, it's the top priority: you're guarding the front door.

You'll be securing AI traffic while the playbook is still being written: prompt injection, agentic authorization, MCP. These are problems nobody has fully solved yet.

We're looking for a Software Engineer with a security specialization to join our Runtimes team as a Security Champion: an engineer who writes real code and makes security a built-in part of how we ship.

What You'll Do:

Run security-focused code audits, threat modeling, and secure design reviews across our AI Gateway and API Gateway capabilities

Own vulnerability management end-to-end: triage, reproduction, remediation, verification

Partner with AI Gateway engineering on emerging AI/LLM threat patterns (ie: prompt injection, data leakage, model abuse)

Coach engineers on secure coding practices, turning security findings into lasting team habits

Contribute hands-on to Gateway feature work, with security built-in from day one

What You'll Bring:

3+ years building production software, with 2+ years in a dedicated security role (AppSec, vulnerability research, or pentesting);

Solid coding skills in a object oriented language (Rust, Java, Python, Go, or similar);

Practical threat-modeling experience;

Working knowledge of cybersecurity (especially L7 security and authentication);

Basic knowledge of AI attack vectors.

Nice-to-have:

Familiarity with L7 proxies/API gateway architecture (Nginx, OpenResty, Envoy, HAProxy or Kong);

Experience with Lua;

Open-source contributions;

Willingness to learn Rust is important for where our platform is heading: we'll help you get there.

Requirements

  • ·3+ years building production software, with 2+ years in a dedicated security role (AppSec, vulnerability research, or pentesting);
  • ·Solid coding skills in a object oriented language (Rust, Java, Python, Go, or similar);
  • ·Practical threat-modeling experience;
  • ·Working knowledge of cybersecurity (especially L7 security and authentication);
  • ·Basic knowledge of AI attack vectors.

Benefits

  • ·A permanent contract under the CCNL Commercio (Quadro)
  • ·Bonus and welfare system
  • ·Hybrid work from our Milan Hub at Talent Garden Isola, and a seat at the table where security decisions actually shape what millions of API calls run through every day.

How to apply

  1. 1Check the flexibility label above, hybrid, matches where you plan to live and work.
  2. 2Tailor your CV to the role at Kong, mentioning your remote working experience.
  3. 3Apply directly on the employer's careers page using the button below. Nomaders never handles your application.

Found 11d ago. Last checked today. Always confirm the details on the original posting, salary and location can change after publication.

Listing sourced from Company boards.

€77k to €95k per year · You'll be taken to the employer's careers page.