Senior Software Engineer (Security Champion), Runtimes

• Run security-focused code audits, threat modeling, and secure design reviews across our AI Gateway and API Gateway capabilities
• Own vulnerability management end-to-end: triage, reproduction, remediation, verification
• Partner with AI Gateway engineering on emerging AI/LLM threat patterns (ie: prompt injection, data leakage, model abuse)
• Coach engineers on secure coding practices, turning security findings into lasting team habits
• Contribute hands-on to Gateway feature work, with security built-in from day one

• 5+ years building production software, with 2+ years in a dedicated security role (AppSec, vulnerability research, or pentesting);
• Solid coding skills in a object oriented language (Rust, Java, Python, Go, or similar);
• Practical threat-modeling experience;
• Working knowledge of cybersecurity (especially L7 security and authentication);
• Basic knowledge of AI attack vectors.

• Familiarity with L7 proxies/API gateway architecture (Nginx, OpenResty, Envoy, HAProxy or Kong);
• Experience with Lua;
• Open-source contributions;
• Willingness to learn Rust is important for where our platform is heading: we'll help you get there.

• A permanent contract under the CCNL Commercio (Quadro)
• Bonus and welfare system
• Hybrid work from our Milan Hub at Talent Garden Isola, and a seat at the table where security decisions actually shape what millions of API calls run through every day.

Kong Inc., the AI Connectivity Company, is building the connectivity layer of AI. Trusted by the Fortune 500® and AI-native startups alike, Kong’s unified API and AI platform enables organizations to secure, manage, accelerate, govern, and monetize the flow of intelligence across APIs and AI traffic — on any model, any cloud. For more information, visit www.konghq.com http://www.konghq.com.