Senior Software Engineer (Security Champion), Runtimes

The role

A Software Engineer with a security specialization will join the Runtimes team as a Security Champion. You will secure AI traffic and perform security-focused code audits, threat modeling, and secure design reviews across AI and API Gateway capabilities.

What you will do

• Run security-focused code audits, threat modeling, and secure design reviews
• Own vulnerability management end-to-end including triage, reproduction, remediation, and verification
• Partner with AI Gateway engineering on emerging AI/LLM threat patterns
• Coach engineers on secure coding practices
• Contribute hands-on to Gateway feature work

Required qualifications

• 5+ years building production software
• 2+ years in a dedicated security role (AppSec, vulnerability research, or pentesting)
• Solid coding skills in a object oriented language (Rust, Java, Python, Go, or similar)
• Practical threat-modeling experience
• Working knowledge of cybersecurity (especially L7 security and authentication)
• Basic knowledge of AI attack vectors

Nice to have

• Familiarity with L7 proxies/API gateway architecture (Nginx, OpenResty, Envoy, HAProxy or Kong)
• Experience with Lua
• Open-source contributions
• Willingness to learn Rust

Benefits

• Permanent contract under the CCNL Commercio (Quadro)
• Bonus and welfare system

About the company

Kong Inc. is the AI Connectivity Company building the connectivity layer of AI. Their unified API and AI platform enables organizations to secure, manage, accelerate, govern, and monetize the flow of intelligence.