Senior Security Engineer

Join Apify on our mission to help anyone get more value from the web, so they can automate tasks and spend time on the things that matter most.

Apify downloads billions of web pages from all over the world for AI, market research, and finding lost children. We give chatbots the context to interact intelligently, and we’re making agents an integral part of the Apify platform.

We’re looking for a Senior Security Engineer to build Apify's security function from the ground up. You'll have the rare opportunity to shape how we protect the Apify platform, with 55,000 monthly active users and 25,000 customers. You’ll establish a dedicated security function across the company as the first member of the new security team. It's a lot of responsibility, and a lot of opportunity.

You'll focus primarily on product security - making sure our features, infrastructure, and development practices keep users safe. But you'll also help shape IT security standards across the company. We have solid foundations (SOC 2, established policies), but we need someone to take ownership, identify gaps, and drive continuous improvement.

What you’ll be working on:

Product and infrastructure security:

• Secure our software development lifecycle: Review major architectural changes for security implications before deployment.

• Vulnerability management: Own the full lifecycle of vulnerabilities, leveraging GitHub Dependabot, code scanning, and external tools.

• Coordinate security testing: Manage and coordinate penetration testing and oversee our bug bounty program.

• Secrets and access: Manage secrets, credentials, and control access to sensitive systems.

• Collaboration: Work directly with engineering teams to ensure vulnerabilities are fixed within established SLAs.

• Cloud hardening: Enhance and secure our AWS environment, focusing on IAM policies, network security, and robust logging.

• Threat detection and response: Monitor for threats, respond to security incidents, and continuously improve our detection capabilities.

• Security automation: Build and implement automation to improve security and efficiency across the infrastructure.

Company security and standards

• Policy and governance: Maintain and evolve our existing security policies and standards.

• Compliance: Actively support ongoing compliance efforts (e.g. SOC 2, CIST).

• Risk management: Evaluate third-party vendors and integrations to assess and mitigate security risks.

• Training: Run security awareness training to maintain a security-conscious and sharp team.

• IT security operations: Perform security reviews and audits of internal IT infrastructure and oversee the vendor security review process for all third-party software and services.

Who we’re looking for:

• Experience: 5+ years mainly in security engineering, Application Security (AppSec), or a closely related field. Previously worked in a security team within a larger company (250+ employees).

• Cloud: Hands-on experience securing cloud environments (e.g. IAM, CloudTrail, GuardDuty).

• Web security knowledge: Solid understanding of common web application vulnerabilities (OWASP Top 10).

• Tooling: Experience with vulnerability scanning, SAST/DAST tools, and utilizing GitHub's security features.

• Technical aptitude: Ability to read and review code (proficiency in Node.js/TypeScript is a plus).

• Communication: Strong ability to communicate technical security risks and work effectively with engineering, product, and leadership.

• Self-starter mentality: You’ll be instrumental in building this function, not just maintaining an established one.

Why should you work at Apify?

• Space, support, and autonomy for personal growth, with a direct impact on our success

• Full-time position in Prague at our amazing office located in Lucerna Palace 🏰

• Option to work remotely 🛋️

• Flexible working hours 🕰️

• Nobody counts holidays as long as the work gets done 💪

• Stock options and profit sharing 💰

• Free Multisport card 🏋️‍♀️

• We welcome pets, kids, and bikes at the office 🐶

• Epic team buildings and offsites 🚢 with biking, canoeing, and other adventures 🪂

• Solid education and training budget, conference tickets, internal “Eat & Learn” sessions, and the possibility to work across teams

• Generous hardware budget 💻

• Free lunches every day when working from the office 🌮🥡

• Unlimited supply of ☕ & 🍺 and snacks

• Free entry to the wonderful Prague Zoo 🐘

• Ping-pong, chess, PS5, lightsabers, foosball league after lunch 🏓

For more details about Apify and what it is like to work with us, see our Careers page.