Security Engineer

• Support Product Security Incident Response Team (PSIRT) and vulnerability-handling activities
• Validate, triage, track, and coordinate security reports
• Provide practical remediation guidance to engineering teams
• Help validate security fixes and reduce product security risks
• Review code, APIs, and system architecture to identify security issues early
• Conduct threat modeling and security design reviews
• Improve security automation within engineering workflows
• Support SAST, SCA, secrets scanning, and other security controls
• Maintain software bills of materials (SBOMs), dependency visibility, and remediation follow-up
• Support security assessments, vulnerability assessments, and penetration testing
• Maintain vulnerability-handling playbooks, product security procedures, and incident response runbooks

Product Security Engineer

• Predictive AI Threat Modeling: Lead advanced threat-modeling exercises across the bank’s localized AI/ML pipelines, data repositories, and training environments. Anticipate sophisticated attacker behaviors to design preemptive security guardrails before models are moved to production.
• AI Red Teaming & Offensive Simulations: Conduct targeted offensive operations and ethical hacking against our on-premises AI infrastructure. Simulate real-world adversarial attacks, including data poisoning, model inversion, membership inference, evasion attacks, and prompt injection.
• Framework Mapping with MITRE ATLAS: Implement and operationalize the MITRE ATLAS (Adversarial Threat Landscape for Artificial-Intelligence Systems) framework. Map identified vulnerabilities to ATLAS tactics and techniques to build a robust, AI-specific defensive matrix aligned with traditional MITRE ATT&CK.
• On-Premises Infrastructure Hardening: Assess and secure the physical and virtual infrastructure hosting our AI workloads, including bare-metal GPU clusters, local containerized environments (Kubernetes/OpenShift), and private data registries, ensuring strict isolation from external threats.
• Proactive Risk Management & Early Detection: Collaborate with the SOC and data engineering teams to build predictive detection use-cases and custom alerts. Identify the early warning signs of an AI-targeted attack or data exfiltration attempt before malicious actors can compromise model integrity.

AI Cybersecurity Engineer – Offensive Security, Threat Modeling

• You design prompt injection scenarios in YAML, run them against frontier models, validate success rates, and submit passing tasks.
• 5 high-quality tasks per week (full-time equivalent).

Adversarial Task Writer, AI Security, RL Gyms

• Own Semaphore's SOC 2 and ISO 27001 readiness, evidence collection, and audit coordination.
• Keep policies, controls, procedures, and supporting documentation current and practical.
• Track compliance gaps and coordinate follow-through with the right owners.
• Handle customer security questionnaires, compliance requests, and vendor assessments with clear, reusable materials.
• Maintain practical risk, vendor review, privacy, and DPA workflows so customer commitments and internal practices stay aligned.
• Partner with Engineering and Infrastructure on technical control validation, penetration testing, access reviews, and cloud/on-prem governance.
• Keep security and compliance processes lightweight, clear, and owned, including emerging governance needs around internal AI use.

Security Engineer jobs in Serbia

See all jobs on JobTailor

Product Security Engineer

AI Cybersecurity Engineer – Offensive Security, Threat Modeling

Adversarial Task Writer, AI Security, RL Gyms

Security and Compliance Manager