Title: Senior Information Security Engineer (AI), Platform Security Team
Company: Ozon
Location: Moscow
Experience: 3 to 6 years
Hi! This is the Infrastructure Security team.
We are looking for a senior engineer who will take a key role in transforming our team through the implementation of LLM and AI agents in daily information security processes. You will not just use ready-made AI tools, but design and build new departmental workflows based on them — from automating routine tasks to fundamentally new approaches to threat analysis, incident response, and infrastructure security management.
The main part of your time (about 80%) will be dedicated to this area. The remaining 20% will be spent participating in projects of the department to improve the security of the company's ML infrastructure, servers, and network, which will give you practical context of real information security tasks on which your AI solutions are built.
The work requires a strong engineering background, developed automation and programming skills, as well as a practical understanding of LLM and AI — their capabilities, limitations, and risks of application in the context of information security.
Your responsibilities will include
- Designing, developing, and implementing LLM/AI agents and AI-assisted tools for the information security team's processes (incident analysis, threat intelligence, vulnerability management, automation of routine operational tasks, etc.).
- Building new team workflows based on AI solutions — from pilots and MVPs to production operation.
- Evaluating the applicability of LLM/AI tools and agent architectures to information security tasks, forming reasoned recommendations for implementation.
- Developing automation using programming languages to integrate AI solutions with existing infrastructure and tools (SIEM, ticketing systems, EDR, etc.).
- Considering and minimizing security risks associated with the use of LLM/AI (data leaks, prompt injection, uncontrolled agent access to systems, etc.).
- Documenting architecture, processes, and practices for using AI tools, training the team to work with them.
- Participating (about 20% of the time) in Infrasec Core Team projects to improve the security of network and server infrastructure.
- Working closely with CSIRT, VM, Endpoint/Server Security, and Network Security teams to identify areas where AI agents will provide the greatest impact.
What we are looking for
- 4+ years of experience in information security or a related engineering field.
- Strong programming and automation skills (Python or Go preferred).
- Ability to write production-ready code independently, not just prototypes.
- Practical experience with LLM/AI: using model APIs, building agent pipelines, working with RAG, prompt engineering, understanding limitations and risks.
- Understanding of LLM/AI application specifically in the context of information security.
- Experience in architecture design (for new processes/services), ability to independently make and justify technical decisions.
- Basic engineering understanding of operating systems (Windows/Linux), network infrastructure, and typical protection mechanisms — sufficient to design AI solutions for real information security tasks, not in isolation from context.
- Understanding of cybersecurity principles, attack vectors.
- Ability to work at the intersection of multiple teams, act as a driver of change, and train colleagues on new tools.
- Initiative, independence, and readiness to build processes "from scratch" in a rapidly changing field.
Will be a plus
- Experience participating in the development of internal LLM-based tools (bots, assistants, ticket automation).
- Familiarity with agent system frameworks (LangChain, LlamaIndex, similar) and MCP.
- Experience with Vulners, Jira API, SIEM, or other systems typical for information security processes.
Skills: Information Security
