Security Engineer

Job description

We are currently looking for an enthusiastic and knowledgeable Security Engineer. In this role, you will help develop, operate, and automate GoodData.AI's security operations practices, processes, and tools. You will work across Engineering, Internal IT, and other teams on security projects resolving events, issues, and tasks, and maintaining an environment where the information security of our customers' data and GoodData.AI's own sensitive data is monitored proactively and systematically. You'll also help us stay ahead of emerging threats and risks, and respond to security incidents in a timely, efficient way. The infrastructure you'll protect is hosted in both private and public clouds. In addition, this role puts you at the forefront of two active areas: process automation and AI governance. You'll have room to set direction on how AI is used safely, productively, and under proper governance across the company – and to automate the security work that doesn't need to be done by hand. OUR TEAM Our Security & Compliance team is located both in Prague and Brno. The team is responsible for developing the security strategy of GoodData.AI, driving its execution across the business, and providing assurance activities to increase its effectiveness. The GoodData.AI Security & Compliance team consists of experienced people who love to share their knowledge and experience to help eager candidates grow. WHAT WILL YOU DO? - We need somebody who will become AppSec champion in some time (a security architect can help you improve in application security). - Automate security and compliance processes end-to-end, reducing manual work and raising our baseline. - AI governance – contribution on creating, driving and enforcing the guidelines. - Evaluation of found vulnerabilities and distinguishing what really matters (our SecOps lead can help you grow in this area). - Security incidents management, monitoring, alert tuning, log analysis. - Privileged access management. - Overseeing Business Continuity & Disaster Recovery Management. - You should be able to understand at a time our platform and public cloud infra (lots of amazing people to help you with that). ABOUT YOU - Passionate about security. - Good communication skills. - Hungry to learn new things. - Solid understanding of security technologies (firewalls, IAM, log management, vulnerability scanners, etc.). - Operational experience with AI concepts, its securing and connections with other systems (LLMs, MCP, etc.). - Knowledge of Python, n8n etc. (or ability to somehow automate stuff). - Knowledge of Linux and shell. - OWASP, SSDLC, vulnerability remediation and evaluation, and security incident management practices. - At least a high-level understanding of cloud / SaaS specifics. - Analytical skills, ability to pair technology risks to business exposure. - Organized and autonomous, able to work independently. IT IS NICE IF YOU HAVE - Knowledge of Agile methodologies; experience with DevOps is a plus. - Experience with some AI frameworks (e.g. ISO 42001, AIUC-1 or EU AI Act). - SSDLC, DAST and SAST. - An ability to operate both on business and technical levels, across departments and management levels. ABOUT GOODDATA GoodData.AI powers modern BI for the modern data stack. GoodData.AI is a cloud-based analytics platform. Employees, customers, and business partners will understand the data in the same way thanks to GoodData’s robust end-to-end pipeline; self-service analytics; low-code/no-code interfaces; embeddable data visualization; application integration; and more. #LI-Hybrid