Senior Security Engineer - AppSec (d/f/m)

vivenu

Redefine the future of live entertainment tech Welcome to vivenu, the global leader in event ticketing tech and one of the world’s fastest-growing live entertainment tech firms. We are transforming event ticketing for global leaders like the Grammys, the Golden Globes, Stanford University and the Hockenheimring turning what was once a simple transaction into a strategic business advantage. Backed by over $65 million in funding, our platform empowers event organizers to own their brand experience, unlock deep data insights, and seamlessly integrate ticketing into their digital infrastructure. With six offices worldwide and growing, we deliver a customizable, intuitive solution and industry-leading support that simplify even the most complex ticketing challenges – helping organizers deliver exceptional experiences and drive real growth. Join us and build the future of live entertainment. With over 10 million end users and usage quadrupling annually, our infrastructure now handles over 1 billion requests per month — and counting. Our API-first platform solves complex system challenges at scale — delivering performance, flexibility, and reliability for the world’s leading live entertainment brands.  

OH-SO

WHAT TO EXPECT We are a startup digital agency, and no two projects, clients, or even days look the same. In ecommerce we build on Shopify and Liquid and Next.js, with custom AWS microservices and apps that take Shopify well past the defaults.  On the marketing side we build highly customised sites in Next.js and React, with careful design and animation and a real focus on how the page performs and feels.  In automotive we build full platforms, from stock-car locators to configurators and more. Across all of it, we bring AI into the work through our own products. Here nothing will be fixed. You will work across changing projects and settings, on long builds that run for months and shorter spikes to figure out how a business can actually use AI, and you will help us rethink how agency work is done. Sound like your kind of place? Here is what we need from you. YOUR COMPETENCIES Mindset Is your goal to deliver great software, whether the problem is easy or hard? Do you push deeper than most to find the right solution, not just the first one that works? Then you are the person we need.  Responsibility You own what you build, all the way through, not just until it ships and becomes someone else's problem. The parts that go smoothly and the parts that get messy are both yours to see through. You bring your ideas, experience and your curiosity, you use AI to build better and faster, and you stand behind what you put your name on. Drive By now the drive is a track record, not a promise. You have years of hard problems behind you and it shows. You understand the whole stack, or you close any gap in it fast, and the hard problems are the ones you go looking for. You are the one who takes the piece nobody else can crack and finds a way through, then leaves the ground solid enough for everyone else to build on. If the hardest part of a project is not the part you reach for, this is not your seat. What you bring to the table: * You work across crafts, not in a corner. You are close with developers, designers, and strategists, and you would rather build in the open than behind a wall. * You make the team better. You speak up when something can be sharper, and you share what you learn instead of sitting on it. * You care whether the client wins. You focus on the quality of the product and the experience, not just the ticket in front of you. WHAT YOU CAN LOOK FORWARD TO What you will actually do: We build complex, end-to-end products for both big-name and niche clients. You are the strongest technical hands on the team, the one the hardest problems land on. Day to day, that means: * Taking the hardest parts of the build and shipping them, the pieces others get stuck on. * Laying the foundations: the architecture, the patterns, and the setup that let the rest of the team move fast and safely. * Jumping in where something turned out harder than planned and getting it unstuck. * Supporting the team on architecture calls and the technical side of client conversations. * You’re enjoying being part of a team, not a remote desk which prefers to work in isolation most of the time. The tech stack you will work with: * Languages and frameworks: React, Next.js, TypeScript, HTML, CSS, Python. * A new language should not slow you down for long. * APIs: REST and GraphQL, Auth (SSO, SAML, OIDC) * Cloud: AWS, GCP, Kubernetes, Terraform * Delivery: Creation and maintenance of CI/CD * AI tooling: Claude, Cursor, Pi, Antigravity, plus your and our own Skills and MCP setup Who you will work with We are a bunch of colleagues originally from similar backgrounds who got tired of how things were usually done and set out to find better ways. That is the whole reason this company exists, and it is still what we are doing. We are not a place of rockstars and egos. People here ask questions out loud, show rough work without flinching, and would rather help each other get something right than look clever alone. We push each other, in the good way, and we do not take ourselves too seriously while we are at it. You would be joining that. You’ll work closely with the crafts, designers and strategists, and just as easily with the people steering the projects and the business. There is no wall between you and any of it. Take on the parts you are ready for, and when you want more, a pitch, a client conversation, a bigger call, speak up at the right moment and the door is open. Smaller team. More ownership. Bigger work.

OH-SO

WHAT TO EXPECT We are a startup digital agency, and no two projects, clients, or even days look the same. But all of our days are agentic-first. In ecommerce we build on Shopify and Liquid and Next.js, with custom AWS microservices and apps that take Shopify well past the defaults.   On the marketing side we build highly customised sites in Next.js and React, with careful design and animation and a real focus on how the page performs and feels.  In automotive and other industries we build full platforms, AI tools and integrations, from stock-car locators to configurators and a lot more. Across all of it, we bring AI into the work through our own products. Here nothing will be fixed. You will work across changing projects and settings, on long builds that run for months and shorter spikes to figure out how a business can actually use AI, and you will help us rethink how agency work is done. Sound like your kind of place? Here is what we need from you. YOUR COMPETENCIES We're looking for engineers who are excited by agentic and AI-native systems - turning models into products that hold up under real users, real load, and real time. You'll build LLM integrations, agents, and RAG pipelines, treat prompt engineering as a code discipline, and make systems reliable through evaluation, guardrails, and solid testing. Whether you're building your craft or already shaping the AI architecture of a project, we want to hear from you. We hire across levels - here's what each looks like at OH-SO: Junior AI/Agentic Engineer You're building your engineering craft - curious about why and how things work, not afraid to get your hands dirty, and eager to grow. You implement from clear briefs - LLM integrations, prompt scaffolding, RAG components - and write the tests and evaluations that keep them honest, comfortable using AI coding tools (Claude Code, Cursor, Copilot) under supervision. You want to understand why and how we're building things, ask what the purpose and the constraint are before you start, and your work is reviewed before it merges. AI/Agentic Engineer (typically 2-3+ years)  You own an AI feature end-to-end - an agent flow, a RAG pipeline, an integration across its error paths and guardrails - delivered independently with light oversight. You build evaluation harnesses to prove quality rather than assume it, use AI coding tools autonomously in production, and contribute to the shared AI backbone (the AI-brain MCP and skill library). Senior AI/Agentic Engineer (typically 5+ years)  You own the AI outcome of a project - you define the integration shape, the multi-agent architecture and orchestration, the evaluation strategy and guardrails, and you write the ADRs that document why. You're the technical credibility in the room, contribute patterns and skills back to the shared backbone, and mentor the engineers around you. You use AI to define new ways of working, and you think in long runtime: the AI landscape will shift underneath the project, so you build for inheritance and replaceable layers. You help us move forward as an organization and you act as an AI evangelist. What you bring to the table, at any level: * Experience building with LLMs or AI systems in production - integration, agents, RAG, or similar * Strong software engineering fundamentals in Python and/or TypeScript, and confidence designing and working with APIs * A habit of treating prompt engineering as a code discipline — with a real understanding of evaluation, guardrails, and reliability * A solid grasp of testing and quality: you build systems that hold up under real use, not just in a demo * A genuine interest in agentic systems and where the AI landscape is heading - and the judgement to apply it well, not just talk about it * Openness to collaborating with cross-functional teams - from designers to strategists - as well as directly with clients * You’re enjoying being part of a team, not a remote desk which prefers to work in isolation most of the time. WHAT YOU CAN LOOK FORWARD TO The stack you’ll work with: * Languages & core: Python and/or TypeScript, strong RESTful API design * AI & agents: LLM integration, RAG and vector databases, agent frameworks, multi-agent orchestration, MCP and agent infrastructure, prompt engineering, context and memory management, evaluation and guardrails * Testing & quality: automated testing, evaluation harnesses, observability and monitoring of AI systems * Cloud & infrastructure: cloud platforms, containerisation with Docker and Kubernetes, CI/CD (infrastructure-as-code with Terraform a plus) * AI tooling: Claude Code, Cursor, Copilot, Google Antigravity Who you will work with We are a bunch of colleagues originally from similar backgrounds who got tired of how things were usually done and set out to find better ways. That is the whole reason this company exists, and it is still what we are doing. We are not a place of rockstars and egos. People here ask questions out loud, show rough work without flinching, and would rather help each other get something right than look clever alone. We push each other, in the good way, and we do not take ourselves too seriously while we are at it. You would be joining that. You’ll work closely with the crafts, designers and strategists, and just as easily with the people steering the projects and the business. There is no wall between you and any of it. Take on the parts you are ready for, and when you want more, a pitch, a client conversation, a bigger call, speak up at the right moment and the door is open. Smaller team. More ownership. Bigger work.