Senior Security Engineer

About the role

About Gelato

Gelato runs the world’s largest network for on-demand production of customized products, from t-shirts and wall art to mugs, books and cards. We’re an AI-first, cloud-native platform with zero physical assets:

- GelatoCreate connects e-commerce businesses to 250+ partners across 32 countries, reaching over 5 billion people in under 72 hours.

- GelatoConnect, our AI-driven print production OS, runs producers’ operations end to end, covering procurement, workflow and logistics.

- Optimalprint, where Gelato began, is our consumer brand in 20+ markets, helping millions of customers create personalised cards, wall art and gifts, online and through its app.

Together they sit between thousands of merchants, our production partners and millions of customers. Every order carries someone’s data, designs and brand.

AI at the Core

We are not just early adopters of AI — we’re AI-native builders, and security is no exception.

- AI is how we work. Engineers use LLMs for code generation, testing and documentation, and autonomous agents drive platform resilience, observability, cost control and internal workflow automation. Our security team works the same way, with LLMs and agents handling alert triage, threat summaries, runbooks and response orchestration.

- AI is also what we protect. AI agents already run inside GelatoConnect and our core platform. They map product catalogues, validate file uploads, and even write and deploy integration code. Agents with that kind of reach raise new questions about tool permissions, prompt injection and data flows, and you’ll make sure what they build is secure without slowing our teams down.

The Role

This isn’t an analyst role where you watch dashboards and send findings back. Our engineers now ship many times more than they used to with AI, so reviewing their work by hand doesn’t scale. You’ll build the agents and automation that review alongside them, make sure the agents engineering builds are secure too, and act as the bridge between information security and engineering.

You’ll join a small information security team and work across application security, cloud and identity, and detection and response. You don’t need to be an expert in all of it. If you’re strong in a few of these areas and keen to grow into the rest, we’ll help you get there.

What You’ll Do

- Automate with AI: build and operate agents for code and change review, alert triage, finding validation, investigation summaries and routing to owners. You’ll connect them safely to internal systems with least privilege, audit logs and human approval for risky actions. You’ll measure them honestly (accuracy, false-positive rate, time saved, what a human had to correct) and retire the ones that don’t earn their keep.

- Secure the SDLC: own SAST, SCA, secret, container and IaC scanning, tuned so engineers trust the signal. Threat-model new services and AI features early, including the agents engineering builds, and build paved-road defaults (libraries, templates, CI checks) so common vulnerability classes become hard to introduce.