{"active":true,"apply_url":"https://jobs.ashbyhq.com/kong/8fb34850-c2c7-48fe-9f95-b8e114977ddc/application","company":{"claimed":false,"name":"Kong","slug":"kong","website":"https://konghq.com"},"countries":["IT"],"employment_type":"full-time","first_seen_at":"2026-10-31T09:15:10Z","getwork_url":"https://getwork.dev/jobs/ab-kong-8fb34850-c2c7-48fe-9f95-b8e114977ddc/","id":"ab-kong-8fb34850-c2c7-48fe-9f95-b8e114977ddc","injection_flag":false,"last_seen_at":"2026-11-03T10:00:10Z","location":"Milan, Italy; Italy","published_at":"2026-10-14T15:25:31Z","regions":["europe"],"remote":"hybrid","role_family":"security","salary":{"currency":"EUR","max":95340,"min":77180,"period":"year","source":"structured"},"seniority":"senior","stack":["rust","llm"],"stack_mentioned":["go","python","java"],"title":"Senior Security Engineer (Security Champion), Runtimes","untrusted_description":"Are you ready to unlock intelligence?\n\nIf you don’t think you meet all of the criteria below but are still interested in the job, please apply. Nobody checks every box - we’re looking for candidates that are particularly strong in a few areas, and have some interest and capabilities in others.\n\nAbout the Role:\n\nAt Kong, our API and AI Gateway sits at the center of how Fortune 500 enterprises and AI-native startups secure and govern the flow of intelligence.\n\nEvery request into a company's infrastructure goes through the Gateway first. Security isn't a side concern here, it's the top priority: you're guarding the front door.\n\nYou'll be securing AI traffic while the playbook is still being written: prompt injection, agentic authorization, MCP. These are problems nobody has fully solved yet.\n\nWe're looking for a Software Engineer with a security specialization to join our Runtimes team as a Security Champion: an engineer who writes real code and makes security a built-in part of how we ship.\n\nWhat You'll Do:\n\n- Run security-focused code audits, threat modeling, and secure design reviews across our AI Gateway and API Gateway capabilities\n\n- Own vulnerability management end-to-end: triage, reproduction, remediation, verification\n\n- Partner with AI Gateway engineering on emerging AI/LLM threat patterns (ie: prompt injection, data leakage, model abuse)\n\n- Coach engineers on secure coding practices, turning security findings into lasting team habits\n\n- Contribute hands-on to Gateway feature work, with security built-in from day one\n\nWhat You'll Bring:\n\n- 3+ years building production software, with 2+ years in a dedicated security role (AppSec, vulnerability research, or pentesting);\n\n- Solid coding skills in a object oriented language (Rust, Java, Python, Go, or similar);\n\n- Practical threat-modeling experience;\n\n- Working knowledge of cybersecurity (especially L7 security and authentication);\n\n- Basic knowledge of AI attack vectors.\n\nNice-to-have:\n\n- Familiarity with L7 proxies/API gateway architecture (Nginx, OpenResty, Envoy, HAProxy or Kong);\n\n- Experience with Lua;\n\n- Open-source contributions;\n\n- Willingness to learn Rust is important for where our platform is heading: we'll help you get there.\n\nWhat we offer:\n\n- A permanent contract under the CCNL Commercio (Quadro)\n\n- Bonus and welfare system\n\n- Hybrid work from our Milan Hub at Talent Garden Isola, and a seat at the table where security decisions actually shape what millions of API calls run through every day.\n\n#LI-EA1\n\nAbout Kong:\n\nKong Inc., the AI Connectivity Company, is building the connectivity layer of AI. Trusted by the Fortune 500® and AI-native startups alike, Kong’s unified API and AI platform enables organizations to secure, manage, accelerate, govern, and monetize the flow of intelligence across APIs and AI traffic — on any model, any cloud. For more information, visit www.konghq.com http://www.konghq.com.","url":"https://jobs.ashbyhq.com/kong/8fb34850-c2c7-48fe-9f95-b8e114977ddc"}