人工智能安全工程师（m/f/n）
AI Security Engineer (m/f/n)
InPost 在波兰重新定义了电子商务包裹配送，并已成为欧洲领先的户外（OOH）电子商务赋能平台之一。由 Rafał Brzoska 于 1999 年创立，InPost 通过覆盖九个欧洲国家（波兰、英国、法国、意大利、西班牙、葡萄牙、比利时、荷兰和卢森堡）的超过 64,000 个自动包裹机（APM）和 30,000 多个取件和投递点（PUDO），提供包裹配送服务，同时还为电子商务商家提供门到门快递和履约服务。
InPost 的广泛 OO H 网络支持其市场中快速增长的包裹量，2025 年已交付 14 亿件包裹。其智能柜解决方案为消费者提供了更便宜、更灵活、更便捷、环保且无接触的配送选择。作为领先的 OO H 物流提供商，InPost 因在欧洲重塑包裹配送经济而受到认可，通过其灵活、技术驱动的解决方案吸引消费者和商家。
你的职责：
· 参与 InPost 技术体系中 AI、LLM 和代理系统的安全评估和安全设计审查。
· 识别、复现并分析 AI 驱动和代理系统中的真实漏洞，并与工程团队合作从根源上修复这些问题。
· 定义并构建针对 AI/ML 和 LLM 相关风险的安全控制措施。
· 构建安全自动化和面向开发者的工具链，帮助产品和工程团队默认安全地进行开发。
· 审查新的 AI 解决方案和系统架构的安全风险，并在 AI 治理论坛和 AI 解决方案目录中代表安全立场。
· 在 AWS、Azure 和 GCP 上应用实际的云和容器安全实践，以保护 AI 系统运行的基础设施。
· 成为 AI 特定攻击类别的专家，确保 InPost 的防御能力始终领先于不断演变的威胁环境。
· 将复杂的技术和安全发现转化为清晰、实用的指导，供公司内部各利益相关方理解。
必须具备：
· 5 年以上应用安全或产品安全经验。
· 5 年以上在一种或多种通用编程语言中的编码经验，包括交付和运营生产服务。
· 5 年以上安全评估、安全设计审查或威胁建模经验。
· 对生成式 AI、LLM 和 AI 代理有扎实的理解，了解它们的构建和部署方式。
· 对 AI 系统的攻击面有深入认识，熟悉常见的 AI 攻击方法。
查看英文原文
InPost has revolutionised e-commerce parcel delivery in Poland and is now one of Europe’s leading out-of-home (OOH) e-commerce enablement platforms. Founded in 1999 by Rafał Brzoska, InPost provides delivery services through a network of over 64,000 Automated Parcel Machines (APMs) and more than 30,000 pick-up and drop-off (PUDO) points across nine European countries: Poland, the United Kingdom, France, Italy, Spain, Portugal, Belgium, the Netherlands and Luxembourg, alongside to-door courier and fulfilment services for ecommerce merchants.
InPost’s extensive OOH network supports rapidly growing parcel volumes across its markets, with 1.4 billion parcels delivered in 2025. Its locker solutions offer consumers a delivery option that is cheaper, more flexible and convenient, environmentally friendly and contactless. As a leading OOH logistics provider, InPost is recognised for transforming parcel delivery economics in Europe, appealing to both consumers and merchants through its flexible, technology-driven solutions.
Your responsibilities:
· Work on the security assessment and secure design review of AI, LLM and agentic systems across InPost's technology estate.
· Identify, reproduce and reason about real vulnerabilities in AI-powered and agentic systems, and work with engineering teams to fix them at the root cause.
· Define and build engineered security controls for AI/ML and LLM-related risks.
· Build security automation and developer-facing tooling that helps product and engineering teams build securely by default.
· Review new AI solutions and system architectures for security risk, and represent security in AI governance forums and the AI solutions catalogue.
· Apply hands-on cloud and container security practices across AWS, Azure and GCP to secure the infrastructure AI systems run on.
· Act as a go-to expert on AI-specific attack classes, keeping InPost's defences ahead of an evolving threat landscape.
· Translate complex technical and security findings into clear, practical guidance for stakeholders across the business.
Must have:
· 5+ years of experience in application security or product security.
· 5+ years of coding experience in one or more general-purpose languages, including shipping and operating production services.
· 5+ years of experience with security assessments, secure design reviews or threat modelling.
· Solid understanding of generative AI, LLMs and AI agents, and how they're built and deployed in production.
· Deep knowledge of AI-specific attack classes and how they apply to real systems.
· Experience securing agentic, code-execution or LLM-integrated systems.
· A track record of finding and reasoning about real vulnerabilities in real systems.
· Experience building engineered security controls, not just flagging issues.
· Hands-on cloud and container security experience on AWS, Azure or GCP.
· Strong presentation skills, with the ability to translate complex technical and security topics into clear business terms for a wide range of stakeholders.
· Good English skills, enabling confident communication in an international environment.
Nice to have:
· Background building security automation or developer-facing security tooling.
· Working knowledge of the OWASP Top 10 for LLM Applications and OWASP Top 10 for Agentic Applications.
· Working knowledge of MITRE ATLAS.
Why InPost?
· Opportunity to work in a diverse, international, and cross-functional environment, along with leading experts.
· You work and learn from a senior leader and their leadership team, expanding your experience and exposure in the e-commerce and logistics industries.
· InPost is a growing company that offers its people an increasing number of opportunities in several locations in Europe.
· Fulfilling careers with a range of benefits for people and investing in providing training opportunities for their development.
· You will feel a part of the InPost community that makes an impact on sustainability, convenient deliveries, and the circular economy every day.
· Excellent working environment and flexible hours
· We offer B2B type of contract