Purpose of the Job :

As members of 6sense’s Security department, the Security Engineering team protects the platform across application, infrastructure, and cloud domains. The Vulnerability Operations function ensures that vulnerabilities are identified, triaged, validated, and remediated in a consistent, timely, and risk‑based manner. Senior Security Engineers work closely with Engineering, CloudOps, Product, and GRC teams to operationalize vulnerability management processes, build automation, standardize workflows, and ensure secure-by-default practices. 

Responsibilities & Accountabilities :

• Ensure vulnerability management tools (e.g., Wiz, Invicti, Rapid7, GHAS, Ox) are correctly configured for appropriate coverage and accurate detection. 
• Perform hands-on triage, validation, and root cause analysis of vulnerabilities across AppSec, InfraSec, and CloudSec. 
• Track and report vulnerability status against SLAs, escalating to engineering owners as needed. 
• Build and maintain dashboards, filters, reports, and triage scripts to support visibility and automation. 
• Assist engineering teams in reproducing and remediating vulnerabilities, providing actionable guidance. 
• Support the bug bounty program operations (not ownership), including validation and coordination with engineering teams. 
• Conduct security reviews and threat modeling for high-risk systems or changes. 
• Participate in initiatives that holistically address systemic or multi‑domain vulnerabilities. 
• Contribute to development of automated security testing pipelines for validation of fixes. 
• Participate in on-call or off‑hours incident response related to critical vulnerabilities and time‑sensitive patches. 
• Contribute to quarterly OKRs and security engineering roadmap initiatives. 

Performance Measurement :

• Understands 6sense’s product, architecture, cloud footprint, and environment in depth. 
• Takes ownership of vulnerability triage and prioritization while escalating where required. 
• Proactively identifies and escalates AI/ML‑related vulnerabilities or misconfigurations in systems integrating LLMs or automated decisioning. 
• Meets tight deadlines and SLAs for vulnerability response and validation. 
• Maintains accurate and up-to-date triage scripts, documentation, dashboards, and workflows. 
• Participates in weekly 1:1s and skip levels; provides clear progress updates. 
• Supports security engineers and development teams with accurate, actionable analysis. 
• Effectively participates in incident response and post‑incident remediation. 

Educational and Experience Requirements :

• 5+ years of experience in security engineering across vulnerability management, AppSec, CloudSec, or InfraSec. 
• Experience with vulnerability tools (e.g., Wiz, Rapid7, Invicti, GHAS, SAST/DAST) and triage workflows. 
• Understanding of cloud security (AWS preferred) and modern microservices architectures. 
• Experience identifying and mitigating AI/ML‑related security risks, including model abuse, prompt‑injection vulnerabilities, and risks introduced by LLM‑based features. 
• Experience with scripting/automation (Python, Bash, JavaScript, etc.). 
• Experience working directly with engineering teams to address vulnerabilities. 
• Familiarity with frameworks such as OWASP, NIST, CIS Benchmarks, MITRE ATT&CK. 
• Experience with IaC security (Terraform, CloudFormation, Pulumi) preferred but not required. 

Preferred Qualifications :

• Bachelor's degree in a related field 
• Relevant industry certifications, such as AWS, CNCF, and GIAC are highly desirable 

Competencies and Behaviors :

• Establishes strong credibility with engineering partners. 
• Maintains a professional, outcome-focused demeanor. 
• Advocates for vulnerability and security best practices. 
• Works independently on complex triage and analysis tasks. 
• Manages competing priorities effectively, escalating when appropriate. 
• Communicates clearly across technical and non-technical audiences. 
• Maintains accuracy, attention to detail, and documentation hygiene. 

Senior Security Engineer – Application Security (AI Security Focus)

Reporting To: Manager, Security Engineering Function/Dept: Business Technology / Security

About the Role

You will drive platform security initiatives with a primary focus on securing AI/ML systems and models. You’ll partner with engineering, product, and data science teams to ensure robust security for AI-powered features and infrastructure, while maintaining coverage for traditional AppSec domains.

Responsibilities & Accountabilities

• AI Security Leadership: Lead the design and implementation of security controls for AI/ML models, pipelines, and data flows.
• Vulnerability Management: Ensure coverage of AI/ML and application vulnerabilities using SAST, DAST, dependency scanning, and specialized AI security tools.
• Threat Modeling & Red Teaming: Conduct comprehensive threat modeling and AI/ML red teaming exercises, including prompt injection, jailbreaking, adversarial attack simulations, and vulnerability assessments for AI systems. Assess risks such as adversarial attacks, model theft, data poisoning, privacy risks, and other emerging threats to AI/ML models and pipelines.
• Automation & Tooling: Build and maintain automation pipelines for AI/ML security testing and monitoring.
• Cross-Functional Collaboration: Partner with Engineering, Product, and Data Science to embed security into AI/ML development lifecycles.
• Incident Response: Support detection, triage, and remediation of AI/ML-specific security incidents.
• Training & Advocacy: Facilitate secure development training focused on AI/ML risks and best practices.
• Metrics & Reporting: Track and report status of vulnerabilities, including AI/ML-specific metrics (e.g., model robustness, data integrity).
• Program Ownership: Design and execute quarterly OKRs for AI/ML security initiatives.

Performance Measurement

• Demonstrates deep understanding of AI/ML security risks and mitigations.
• Leads identification, triage, and management of AI/ML and application security issues.
• Establishes routines for updating documentation, runbooks, and dashboards with AI/ML security content.
• Effectively communicates complex AI/ML security topics to technical and non-technical stakeholders.

Educational and Experience Requirements

• 5+ years in information security, with significant experience in application security and AI/ML security.
• Hands-on experience securing AI/ML models, pipelines, and data within the AI/ML SDLC. · Familiarity with common AI/ML security threats (adversarial attacks, model inversion, data poisoning).
• Experience with security tools for AI/ML (e.g., Adversarial Robustness Toolbox, MLFlow security plugins).
• Development or scripting experience (Python preferred; experience with AI/ML frameworks a plus).
• Excellent communication skills.

Preferred Qualifications

• Bachelor’s degree in a related field.
• Relevant certifications (e.g., AIRTP+, CAISF, Microsoft AI Security Fundamentals, AWS Certified Security – Specialty, GIAC, CISSP, CEH are highly desirable).
• Experience working directly with software developers and data scientists to improve code/model security.

Competencies and Behaviors

• Establishes credibility among Engineering and Data Science counterparts.
• Advocates for AI/ML security best practices.
• Drives tasks to completion and maintains accuracy of information.
• Effective prioritization and escalation to management.

As a member of 6sense’s Security department, the Security Operations and Threat Management team protects 6sense through prevention, detection, investigation, and response to business-impacting security events, incidents, and threats.

Responsibilities & Accountabilities

• Execute on milestones for end-to-end SecOps & Threat initiatives in accordance with the Security roadmap
• Identify and respond to complex security incidents, including system compromise, intrusion attempts, and/or denial of service attacks by conducting continuous monitoring, vulnerability assessments, and log analysis
• Engage vendors, Infrastructure, IT, GRC, Cloud, and Application Security teams as required to validate alerts, ensure incident resolution, and perform root cause analysis
• Research emerging threats, publicly disclosed vulnerabilities or attack vectors, and proactively push mitigating controls to products and services
• Perform security forensics
• Build security tools and advanced automation that enable the 6sense Security Team to operate at speed and scale
• Propose, plan, lead, and execute threat exercises based on current security trends, advisories, publications, and academic research
• Mentor engineers across Information Security to drive security controls and risk remediation
• Communicate risks and mitigations across multiple audiences with varying levels of sensitivity
• Execute on quarterly individual Key Results that support team Objectives (OKRs)

Performance Measurement

• Maintains up-to-date knowledge of 6sense’s product, environment, systems, and architecture
• Actively prepares for weekly 1:1s with Manager and monthly skip levels
• Takes part in the Security Operations on-call rotation
• Mitigates security exposures
• Drives incidents to closure within established SLAs
• Participates in creation of milestones associated with major security projects
• Executes on milestones associated with major security projects
• Develops and maintains up-to-date handbook pages, runbooks, workflows, and dashboards
• Provides project status updates on a weekly basis

Educational and Experience Requirements

• 5+ years of experience being part of a Security Operations or similar team
• 3+ years of experience developing automation
• 2+ years of experience conducting adversary emulation exercises
• Experience with security tools and cloud environments (e.g., Vulnerability Scanners, SIEM, SOAR, AWS)
• Experience with industry frameworks, regulations, and standards, such as: MITRE ATT&CK, STRIDE, PASTA, ISO 27001, SOC 2, GDPR, PCI, SOX, NIST, etc.

Preferred Qualifications

• Bachelor's degree in a related field
• Relevant industry certifications, such as CISSP, CISM, or GIAC, are highly desirable

Competencies and Behaviors

• Works independently to maintain and improve overall company security posture
• Collaborates with cross-functional teams
• Translates technical requirements into actionable and time-bound requests
• Drives projects and tasks to completion by following up on questions, deadlines, and requests for input
• Maintains accuracy of information
• Proactive prioritization and escalation to management
• Strong communication skills, including verbal, written, and presentation skills

6sense is committed to protecting the privacy and security of your personal information. We will process your personal data for the purposes of the recruitment exercise, which may include assessing your suitability for the role, background, and reference checks, where applicable. Please see our recruitment privacy policy for more information: https://6sense.com/contractor-recruitment-privacy-notice-romania/