ai engineer in travel-tech security

Kiwi.com is a global travel-tech company headquartered in the Czech Republic. Its algorithm helps users find route options and prices that other search engines may not identify, processing billions of price checks across 95% of global flight content. The Security Engineering team builds intelligent systems that embed security across the company’s product and infrastructure.

• Design and deploy agentic AI systems that integrate security into engineering workflows and enable automated policy enforcement and frictionless compliance;
• Own the development, maintenance, and continuous improvement of internal security agents and the automation platform;
• Measure success through engineer adoption and security impact per interaction;
• Define risk-based telemetry and alerting to reduce signal noise and guide engineering teams toward high-impact security decisions;
• Own cloud security posture across the infrastructure through hardening, automated remediation, and continuous monitoring;
• Build internal tools and SDKs that make security automation and agentic systems accessible across product and infrastructure teams;
• Integrate security automation with endpoint protection, vulnerability management, identity tooling, and GRC platforms;
• Establish centralized program governance and policy-as-code for agents;
• Provide technical guidance to product and infrastructure teams on building and operating agents safely at scale;
• Partner with engineering leadership to turn security gaps into low-friction, agent-driven improvements;
• Participate in incident response and on-call rotations to investigate live security events and endpoint breaches.

• Significant hands-on experience building, deploying, and maintaining agentic AI systems in production;
• Experience with agent frameworks, orchestration, and reasoning loops;
• Proven experience building agents for vulnerability assessment, policy enforcement, access management, or compliance automation;
• Deep expertise in platform infrastructure, cloud-native systems, AWS or GCP, and security challenges in developer platforms and high-velocity product companies;
• Experience integrating and automating endpoint protection suites, cloud security posture management, vulnerability management, and identity platforms;
• Experience with risk-based telemetry filtering and actionable prioritization;
• Advanced proficiency in Python, Go, or Rust with experience building maintainable production systems;
• Willingness to participate in incident response and on-call rotations;
• Strong written and verbal communication skills in English, with the ability to explain complex technical decisions to diverse stakeholders.

• Hybrid and flexible work environment;
• Modern office in central Barcelona with views and amenities;
• Monthly €200 entitlement redeemable through Cobee;
• Flexible compensation allowing employees to allocate up to 30% of gross salary to certain products or services with tax exemption;
• Flexible working hours;
• 30 Paid vacation days and sick days;
• Annual financial bonus based on company and individual performance;
• Flight vouchers for Kiwi anniversaries;
• EU relocation package, including visa transfer support;
• Dogs are welcome in the offices.