Information Security Engineer (AI Security) | 1

Company Description Inetum Polska is part of the global Inetum Group and plays a key role in driving the digital transformation of businesses and public institutions. Operating in cities such as Warsaw, Poznan, Katowice, Lublin, Rzeszow, Lodz the company offers a wide range of IT services. Inetum Polska actively supports employee development by fully funding training, certifications, and participation in technology conferences. Additionally, the company is involved in local social initiatives, such as charitable projects and promoting an active lifestyle. It prides itself on fostering a diverse and inclusive work environment, ensuring equal opportunities for all. Globally, Inetum operates in 19 countries and employs over 28,000 professionals. The company focuses on four key areas: Consulting (Inetum Consulting): Strategic advisory services that help organizations define and implement innovative solutions. Infrastructure and Application Management (Inetum Technologies): Designing and managing IT systems tailored to clients’ individual needs. Software Implementation (Inetum Solutions): Deploying partner solutions from industry leaders like Microsoft, SAP, Salesforce, and ServiceNow. Custom Software Development (Inetum Software): Creating unique software solutions to meet specific client needs. With strategic partnerships with major technology giants, including Microsoft, SAP, Salesforce, and ServiceNow, Inetum delivers advanced technological solutions tailored to customer requirements. In 2023, Inetum reported revenues of €2.5 billion, underscoring its strong position in the digital services market. Inetum distinguishes itself by offering a comprehensive range of benefits that meet the diverse needs of employees, providing flexibility, support and commitment. Here's what makes working at Inetum unique: Flexible and hybrid work: Flexible working hours. Hybrid work model, allowing employees to divide their time between home and modern offices in key Polish cities. Attractive financial benefits: A cafeteria system that allows employees to personalize benefits by choosing from a variety of options. Generous referral bonuses, offering up to PLN6,000 for referring specialists. Additional revenue sharing opportunities for initiating partnerships with new clients. Professional development and team support: Ongoing guidance from a dedicated Team Manager for each employee. Tailored technical mentoring from an assigned technical leader, depending on individual expertise and project needs. Community and Well-Being: Dedicated team-building budget for online and on-site team events. Opportunities to participate in charitable initiatives and local sports programs. A supportive and inclusive work culture with an emphasis on diversity and mutual respect. Job Description We are looking for an experienced Information Security Engineer with a focus on AI Security to help ensure the secure, scalable, and compliant use of AI technologies across the organization. In this role, you will define security guardrails, perform risk assessments and red-team exercises, and support AI solutions throughout their entire lifecycle: from design and development to production operations. Working closely with Security, Architecture, Engineering, Data Protection, Compliance, and Governance teams, you will play a key role in enabling the safe adoption of AI technologies, including machine learning models, Generative AI, agentic systems, and third-party AI services. Main Tasks Perform threat modeling and security assessments for AI systems, including LLMs, GenAI solutions, agentic AI, and RAG architectures. Identify, assess, and mitigate AI-specific risks such as prompt injection, data poisoning, model leakage, and other emerging threats. Evaluate supply chain risks related to models, agents, plugins, and external AI services. Define and implement AI security guardrails, including input/output controls, security policies, rate limiting, monitoring, and isolation mechanisms. Establish and maintain security standards and best practices for production AI environments. Promote secure-by-design and privacy-by-design principles within AI architectures and development processes. Conduct security reviews and approval processes before AI solutions are deployed to production. Plan and execute AI-focused red-team and adversarial testing activities. Assess agentic workflows, automated execution mechanisms, and related abuse or privilege escalation risks. Define logging, monitoring, alerting, and incident response approaches for AI-based systems. Support investigations, incident response activities, and forensic analysis involving AI technologies. Collaborate with cross-functional stakeholders to ensure security, compliance, privacy, and governance requirements are met. Advise engineering and product teams on the secure implementation and operation of AI solutions. Contribute to AI security awareness and enablement initiatives across the organization. Qualifications Several years of experience in Information Security, Cybersecurity, Application Security, Product Security, or a related field. Strong understanding of AI security concepts and risks. Knowledge of the OWASP LLM Top 10. Hands-on experience with threat modeling, security assessments, architecture reviews, and design reviews. Experience defining and implementing enterprise security controls. Experience working with audit logging, monitoring, and security observability solutions. Strong stakeholder management and communication skills, with the ability to collaborate across technical and non-technical teams. Experience supporting security processes throughout the software or AI system lifecycle. Fluent communication skills in English and Polish (minimum B2 level), both written and spoken. Availability to participate in a paid on-call duty rotation as part of the Security team operations. Nice to Have Knowledge of the EU AI Act and other relevant regulatory frameworks. Experience implementing secure-by-design and privacy-by-design initiatives. Familiarity with agentic AI systems and Retrieval-Augmented Generation (RAG) architectures. Experience with model governance and AI supply chain security. Experience designing or delivering AI security awareness and AI literacy programs. Hands-on experience with AI security testing frameworks and adversarial testing techniques. Additional Information This position offers a hybrid or remote work model. Office locations for hybrid work: Warszawa, Poznań, Lublin We hereby inform you that Inetum Polska sp. z o.o. has implemented an internal reporting (whistleblowing) procedure. The content of the procedure and the possibility to submit an internal report are available at: https://inetum.whispli.com/speakup?locale=pl