In the story of Snappfood, we believe in creating value that goes beyond the ordinary. We are willing to establish innovative tendencies and are eager to have you on our team to help us get through our business challenges with creativity, intelligence, and agility. We are waiting for you to continue this story.
Responsibilities:
Embed security practices into software, data/ML, and AI-assisted development and deployment pipelines.
Collaborate with development, data, and ML teams to promote secure coding, model delivery, and AI integration practices.
Implement security controls and monitoring across the SDLC, MLOps lifecycle, and AI/agent workflows.
Design, build, and maintain security toolchains, internal products, services, and integrations for automated testing, secure delivery, and controlled agentic workflows.
Write production-quality code to integrate security controls into Git and CI/CD workflows, with testing, documentation, observability, and support.
Implement continuous security monitoring for applications, infrastructure, data/ML platforms, and approved AI services.
Respond to security incidents, including AI-related misuse or data leakage, and conduct post-incident analysis.
Work closely with development, operations, security, data, and ML teams to address vulnerabilities and AI-security concerns.
Conduct risk and vulnerability assessments covering applications, infrastructure, data/ML systems, and AI/agent workflows.
Mitigate identified risks, including prompt injection, data leakage, unsafe tool use, and excessive agent privileges.
Requirements:
Bachelor's or Master's degree in Computer Science, Software Engineering, Information Security, Information Technology, or a related field.
Builds security tools and integrations in Go, PHP, .NET/C#, Python, and Bash.
Experience with SAST tools such as CodeQL, plus DAST, SCA, secret, API, and container scanning.
Kubernetes and Docker security, including identity, network policy, and runtime controls.
Experience with Ansible and configuration management; infrastructure-as-code knowledge is beneficial.
Secure Git and CI/CD workflows: branching, reviews, protected branches, releases, runners, identities, secrets, artifacts, SBOMs, and provenance.
Understanding of data pipelines, notebooks, model artifacts, MLOps lifecycles, and related risks.
اسنپفود، بزرگترین سرویس آنلاین سفارش غذا در ایران است. ما با ارائهٔ خدمات متنوعی مثل سفارش نان، پروتئین، شیرینی و میوه، تلاش میکنیم تا تجربهای کامل، راحت و سریع برای کاربرانمان بسازیم.
اعتماد و همراهی چند میلیون کاربر، ما را دلگرم کرده تا همیشه به دنبال نوآوری و ارائهی خدماتی با کیفیت بالاتر باشیم.
در این مسیر، مشتاق همکاری با افرادی هستیم که با ذهنی چابک، روحیهٔ یادگیرنده و انگیزهٔ بالا، بتوانند در کنار ما از چالشها عبور کنند و در ساختن آیندهٔ بهتر نقش داشته باشند.