Application Security (AppSec) Engineer

Application Security (AppSec) specialist at GGR Global in Moscow. Salary 250,000–400,000 RUB. 3+ years experience. Focus on securing agentic AI systems, LLM security, and code scanning.

Responsibilities: • Develop and implement isolation and control mechanisms for agentic systems (sandboxes for tool execution, strict contour isolation, action limits, and kill switch for emergency agent shutdown) • Set up detailed audit logs of agent actions in production • Develop and configure a system for monitoring anomalous behavior and alerting on suspicious patterns • Conduct threat modeling for new agentic scenarios during the design phase • Protect against LLM attacks: develop architectural solutions and filters against prompt injection, data exfiltration, jailbreak. Implement strict output validation • Organize and conduct attacks on own agentic systems to identify vulnerabilities before attackers exploit them • Conduct security audits of agentic pipelines from LLM engineering teams to production deployment • Control outbound data: ensure control over what information is sent to external LLM providers and compliance with data usage policies. Ensure inventory and control of all data flows • Configure IAM and secrets management: design and implement a role-based access model for agents. Determine which agent has access and permissions to execute actions in which contour. Configure secure storage and rotation of secrets • Use source code scanners: experience in selecting, piloting, installing, administering, and integrating source code scanners (SAST/DAST) into CI/CD pipeline. Interpret scan results for developers, assist in fixing code vulnerabilities

• Confident Python skills, deep experience with Docker, Linux, understanding of CI/CD principles • Practical threat modeling experience, not just theoretical knowledge • Experience with secrets management systems (HashiCorp Vault or similar), implementing IAM models, setting up sandboxing and isolated environments • Understanding of how LLMs and agentic systems work. Experience with frameworks like LangChain, LangGraph, MCP, understanding of Claude Code principles • Willingness to not only review others' code but also independently design and build secure agents

Location: Moscow Experience: 3+ years Salary: 250,000 – 400,000 RUB Company: GGR Global Office work