Senior Security Engineer

About Beekeeper

Beekeeper believes in the potential of every single employee. That’s why we’ve built the essential platform for frontline workers. We help organisations digitally enable their frontline, to boost productivity, quality and safety, and be more agile.

Beekeeper and LumApps merged to create the first AI-powered Employee Hub, an all-in-one platform designed to connect and empower every employee - whether desk-based or frontline. LumApps, a SaaS platform dedicated to Employee Experience, helps companies drive digital transformation in communication, collaboration, and engagement with their clients, partners, and, most importantly, their employees. Together, our mission is to redefine the employee experience by integrating communication, productivity, and engagement tools into a unified, intelligent platform that serves over 7 million users globally.

Role Overview

We're on the hunt for a Senior Security Engineer at Beekeeper! This isn’t about writing lofty policies that collect dust - this is about making things happen. You’ll get your hands dirty driving AppSec initiatives, coordinating security efforts across teams, and embedding security deep into our SDLC.

Think pentests, SAST, DAST, IDS, secure coding, and DevOps integration. If you're someone who doesn’t just find issues but fixes them, we want you.

Join us to: * Champion security in a fast-paced, cloud-native environment * Collaborate with sharp minds across engineering and product * Lead by example with practical, actionable security improvements

Less ivory tower, more command center. Sound like your kind of gig?

Your Responsibilities

• Execute and enhance the Beekeeper Security posture.
• Be a key contributor in developing security strategy towards AI usage.
• Manage recurring security review processes including penetration testing.
• Own automated DAST, SAST, SCA setups, coordinate follow-up actions resolution across the organization, tune for maximal efficiency.
• Contribute to Software Development Lifecycle by promoting secure coding, API, and AI security; review third party components and vulnerabilities with SCA tool.
• Conduct risk assessments, perform Threat Intelligence reviews and manual security analysis (SIEM alerts).
• Coordinate internal security knowledge sharing sessions facilitated by engineers, support the security awareness trainings.

What we look for in you

• 6+ years of professional experience in application and cloud security.
• Experience applying security best practices in cloud environments such as AWS and GCP.
• Understanding of emerging security concerns related to LLMs and AI systems.
• Strong understanding of application and API security principles (e.g., OWASP Top 10, OWASP API Top 10).
• Solid understanding of data security, encryption techniques and secure data handling.
• Practical experience with source code analysis and the ability to read and understand Python and Java.
• Working knowledge of network protocols and security concepts, including TCP/IP, DNS, WAFs, and IDS.
• Understanding of SaaS microservice architecture, container orchestration, and security controls
• Hands-on experience with security monitoring tools: SAST, DAST, SCA
• Strong grasp of CI/CD pipeline security practices and automation tooling.
• Hands-on experience with Kubernetes and containerized infrastructure.
• Hands-on experience with SCA tools and vulnerability management

Bonus Points

• Advanced interest or expertise in LLM/AI security.
• Production experience writing Python and Java code.
• Familiarity with Azure cloud security practices.
• Experience with Jenkins CI/CD pipelines.
• Knowledge of Terraform or similar IaC orchestrated platforms.
• Contributions to security communities or open-source projects.
• Proven ability to collaborate across DevOps and InfoSec teams.

Our technology stack

• We run on top of AWS and GCP across 4 regions.
• We believe in Infrastructure as Code and manage our cloud infrastructure using Spacelift.
• We run our microservices in containers using managed Kubernetes (EKS and GKE). We manage deployments using Kustomize, Fluxcd and Helm
• Our microservices are written in Java and Python with the majority being written in Java.
• We monitor our services using Prometheus, Grafana, Alertmanager and Jaeger running on top of Grafana Cloud. We use logz.io for our Logging.
• We run multiple data stores including MySQL, PostgreSQL, ClickHouse & Elasticsearch
• We leverage AI both as an engineering productivity tool and a way to bring value to our customers
• And when things go wrong we use PagerDuty and StatusPage to let our teams and customers know.

What we offer

• Competitive salary
• Phone & Home Internet costs reimbursement up to 80 PLN/month
• Private health care package with Luxmed
• Multisport Benefit card
• Creative Allowance – paid as 1000 PLN gross/month
• Home office set-up reimbursement up to 1000 PLN
• Personal Learning & Development Budget of 1500 USD/year
• 26 days of annual leave/year
• 2 Mental Health days off per year

Benefits listed above are part of the compensation package for a contract of employment.