---
title: 'Senior Security Engineer at Gelato'
canonical: 'https://feeny.ai/job/senior-security-engineer-gelato-stockholm-8rydn9051js5'
type: 'job'
last_seen: '2026-11-11'
---

# Senior Security Engineer at Gelato

- **Company:** Gelato
- **Location:** Stockholm, Sweden
- **Employment:** full-time
- **Work type:** hybrid
- **Posted:** 2026-11-05
- **Last confirmed live:** 2026-11-11
- **Apply:** https://jobs.ashbyhq.com/gelato/b0227f02-4ace-4221-b017-5dc5055a852a

## Job description

## About Gelato

Gelato runs the world’s largest network for on-demand production of customized products, from t-shirts and wall art to mugs, books and cards. We’re an AI-first, cloud-native platform with zero physical assets:

- GelatoCreate connects e-commerce businesses to 250+ partners across 32 countries, reaching over 5 billion people in under 72 hours.
- GelatoConnect, our AI-driven print production OS, runs producers’ operations end to end, covering procurement, workflow and logistics.
- Optimalprint, where Gelato began, is our consumer brand in 20+ markets, helping millions of customers create personalised cards, wall art and gifts, online and through its app.

Together they sit between thousands of merchants, our production partners and millions of customers. Every order carries someone’s data, designs and brand.

AI at the Core We are not just early adopters of AI — we’re AI-native builders, and security is no exception.

- AI is how we work. Engineers use LLMs for code generation, testing and documentation, and autonomous agents drive platform resilience, observability, cost control and internal workflow automation. Our security team works the same way, with LLMs and agents handling alert triage, threat summaries, runbooks and response orchestration.
- AI is also what we protect. AI agents already run inside GelatoConnect and our core platform. They map product catalogues, validate file uploads, and even write and deploy integration code. Agents with that kind of reach raise new questions about tool permissions, prompt injection and data flows, and you’ll make sure what they build is secure without slowing our teams down.

## The Role

This isn’t an analyst role where you watch dashboards and send findings back. Our engineers now ship many times more than they used to with AI, so reviewing their work by hand doesn’t scale. You’ll build the agents and automation that review alongside them, make sure the agents engineering builds are secure too, and act as the bridge between information security and engineering. You’ll join a small information security team and work across application security, cloud and identity, and detection and response. You don’t need to be an expert in all of it. If you’re strong in a few of these areas and keen to grow into the rest, we’ll help you get there.

## What You’ll Do

- Automate with AI: build and operate agents for code and change review, alert triage, finding validation, investigation summaries and routing to owners. You’ll connect them safely to internal systems with least privilege, audit logs and human approval for risky actions. You’ll measure them honestly (accuracy, false-positive rate, time saved, what a human had to correct) and retire the ones that don’t earn their keep.
- Secure the SDLC: own SAST, SCA, secret, container and IaC scanning, tuned so engineers trust the signal. Threat-model new services and AI features early, including the agents engineering builds, and build paved-road defaults (libraries, templates, CI checks) so common vulnerability classes become hard to introduce.
- Secure Cloud and Identity: assess and audit cloud and container platform security, including least-privilege IAM, preventative guardrails, cluster hardening, runtime detection and the infrastructure as code behind it. Our Platform team owns implementation. You’ll also manage identity provider roles, clients and access reviews, and keep authentication and authorisation consistent across services.
- Detect and Respond: monitor through our SIEM, scan our attack surface, and lead incidents end to end: containment, investigation, communication, and a blameless write-up whose fixes actually land. Write response playbooks that agents run for the routine steps and that escalate to a person, with the work already done, when judgement is needed. Hunt proactively, feed what you find back into detections and guardrails, and share an on-call rotation.
- Partner with Engineering: explain risk plainly to engineers, product and leadership, and give prioritised, concrete fixes rather than a list of findings. Make security decisions visible by writing down the reasoning, the trade-off, and what we chose not to do.

## What We’re Looking For

- 5+ years in security engineering, AppSec, cloud security or incident response
- An AI-native way of working: hands-on experience building with LLMs (agents, tool calling, RAG or MCP), knowing where they fail, and using AI tools every day. This is a hard requirement.
- Hands-on experience securing a major public cloud (AWS preferred, but Azure or GCP works too), Kubernetes and infrastructure as code, plus solid web, API, OAuth 2.0 / OIDC and IAM fundamentals
- Solid foundations in application security, the secure SDLC and incident response, with deep expertise in some of them
- Production-quality code in Python, Go or TypeScript, and a habit of automating over repeating
- The ability to earn engineers’ trust with plain explanations, practical fixes and pragmatic trade-offs
- Fluent written and spoken English

## Nice to Have

- Offensive security: pentesting, bug bounty, CTFs or published research
- AI red-teaming or OWASP Top 10 for LLM Applications
- Threat hunting, forensics or malware analysis
- Hands-on experience with SIEM and SOAR / workflow automation platforms
- Experience running an open-source identity provider, Kubernetes runtime security or policy-as-code
- OSCP, OSWE, GCIH or cloud security certifications (a plus, never a requirement)

What it's like to work at Gelato We are a customer-obsessed team with the ambition to change the world by connecting technology to the printing industry and making it much more sustainable. Everyone who joins our team must feel genuinely intrigued and motivated by our mission. We expect a lot. We are a driven team with big goals, so we seek individuals who are genuinely passionate about their work and possess an entrepreneurial spirit. Our culture is unique and we live by our values, so it's worth learning more about our culture and how we work before presenting your application. At Gelato, we pride ourselves on our global presence with 11 offices worldwide, fostering a dynamic and diverse work environment. Rooted in a culture that values collaboration, creativity, and camaraderie, we actively cultivate a company culture that thrives on shared experiences. We encourage team members to embrace this culture by working from our office spaces at least three days a week, allowing for meaningful connections and collective growth. Lastly, we ask that you please upload your CV in English, regardless of which country you are applying from.

Candidate Information As part of our commitment to a transparent recruitment process, please be aware that following acceptance of an offer of employment with Gelato, you will be asked to complete a background check conducted by a third-party provider.

## About Gelato

## Company Overview
- **One-liner**: Gelato provides a global software platform for local, on-demand production of personalized print products, connecting ecommerce creators with a worldwide network of local print providers.
- **Entity Type**: Private (Series C)
- **Headquarters**: Oslo, Norway
- **Founded**: 2012
- **Founders**: Henrik Müller-Hansen

## Core Business
- **Primary industry/industries**: Print-on-demand (POD) services, Ecommerce enablement, Supply chain & logistics software, Manufacturing technology.
- **Target customers**: B2B (ecommerce entrepreneurs, creators, global brands) and B2B (local print producers/makers).
- **Mission or purpose statement**: "To redefine global manufacturing for the benefit of people and the planet" by enabling local, on-demand production on a global scale.

## Products & Services
- **GelatoCreate**: A platform for creators and ecommerce entrepreneurs to design, sell, and globally distribute personalized print products (e.g., apparel, wall art, mugs, books) without holding inventory. It integrates with major ecommerce platforms like Shopify, Etsy, Amazon, and TikTok Shop. Products are produced locally in 32 countries.
- **GelatoConnect**: An AI-powered, machine-agnostic operating system (SaaS) for print producers. It includes modules for Procurement, Workflow, and Logistics, helping traditional print shops digitize, automate, and scale their operations to handle on-demand orders.
- **GelatoCreate**: A suite of smart tools for creators, including AI-powered design features (CreateAI) and management tools to help start and grow an ecommerce business.

## Market Standing
- **Valuation/Market Cap**: Not publicly disclosed. The company is privately held.
- **Key Metric**: Total Funding of **$250.4 million** (as of Series C in 2022).
- **Notable Investors/Partners**: Investors include **SEB Pension Foundation, FJ Labs, Nykredit, and St1**. Key partners include Shopify, Etsy, Amazon, TikTok Shop, and a network of 140+ print providers across 32 countries.
- **Growth Signals**: Gelato operates the world's largest print-on-demand network, with 140+ print partners in 32 countries, reaching over 5 billion people. 90% of orders are produced locally, and 90% arrive within 5 days. The company has 170+ team members representing 40+ nationalities across 12 offices in 9 countries.

## Competitive Advantages
- **World's Largest POD Network**: The scale of its network (140+ partners in 32 countries) creates a significant barrier to entry for competitors.
- **Local Production Model**: Products are made where customers are, drastically reducing shipping times (90% arrive within 5 days) and carbon emissions compared to traditional global shipping models.
- **Dual-Sided Platform (Flywheel)**: Gelato serves both creators (demand) and print producers (supply). As creators grow, they fuel local print shops, which in turn become more efficient and attract more creators, creating a powerful network effect.
- **Asset-Light Model**: By owning no printing equipment, Gelato is highly scalable and capital-efficient, focusing purely on software and network orchestration.
- **Sustainability Focus**: Local, on-demand production inherently reduces waste from overproduction and lowers carbon emissions from shipping, a key differentiator for environmentally conscious brands and consumers.

## Strategic Focus
- **Scaling the Network**: Continuously expanding its network of local print providers and logistics partners to increase geographic coverage and reduce delivery times.
- **AI-Powered Automation**: Deepening the capabilities of GelatoConnect with AI to automate workflows, optimize production, and reduce setup times (e.g., from 500 minutes to 5 minutes).
- **Creator Economy Growth**: Capturing the booming creator economy by making it easy for individual creators and small businesses to launch and scale global product lines without upfront risk.
- **Enterprise Adoption**: Attracting larger global brands to use the Gelato network for localized, on-demand production of marketing materials, merchandise, and packaging.

## Why Work Here
- **Culture & Values**: The company emphasizes values of being **Authentic, Long-term, Friendly, and Innovative**. The culture is described as entrepreneurial, with a strong sense of ownership—every employee is a shareholder.
- **Diversity & Inclusion**: Gelato has a "No nationality" policy, actively promoting equality and inclusion. The team of 170+ people represents over 40 nationalities.
- **Work Model**: **Hybrid** – team members are encouraged to work from the office at least three days a week to foster collaboration and camaraderie. The company has 12 offices in 9 countries.
- **Hiring Process**: A structured, 5-stage process designed for mutual fit. It includes personality and logic/coding assessments, a recruiter screen, a hiring manager/technical interview, a panel interview, and a final 30-minute meeting with the founder and CEO, Henrik Müller-Hansen. The process emphasizes objectivity and reducing bias.
- **Compensation & Ownership**: Every employee is a shareholder, reinforcing a sense of purpose and ownership.
- **Glassdoor Rating**: 4.6 / 5.

## Sources
1. [gelato.com - About Gelato](https://www.gelato.com/about-gelato)
2. [gelato.com - Careers Home](https://www.gelato.com/careers/careers-home)
3. [gelato.com - Global Print On Demand Platform](https://www.gelato.com/)
4. [gelato.com - Candidate Pack](https://www.gelato.com/se/careers/candidate-pack)
5. [gelato.com - How We Hire](https://www.gelato.com/careers/how-we-hire)

## Other roles at Gelato

- [Senior Product Marketing Manager](https://feeny.ai/job/senior-product-marketing-manager-gelato-stockholm-2cwztm7mp7gx) — Stockholm, Sweden
- [AI Marketing Specialist](https://feeny.ai/job/ai-marketing-specialist-gelato-stockholm-wrhm9q1s2y83) — Stockholm, Sweden
- [Senior Security Engineer](https://feeny.ai/job/senior-security-engineer-venn-toronto-hpx286t0v1rh) — Toronto, Canada
- [Senior Security Engineer](https://feeny.ai/job/senior-security-engineer-epic-games-cary-cc51yparqmhh) — Cary, NC
- [Senior Security Engineer](https://feeny.ai/job/senior-security-engineer-eliseai-new-york-56c54tmcd9h0) — New York, NY
- [Senior Security Engineer](https://feeny.ai/job/senior-security-engineer-rain-remote-08awp0s8mwb7)
- [Senior Security Engineer](https://feeny.ai/job/senior-security-engineer-seon-europe-3ng7yrmh6prs) — Europe
- [Senior Security Engineer](https://feeny.ai/job/senior-security-engineer-menlo-security-apac-india-bwbsjm0ecsz4) — APAC / India
- [Senior Security Engineer](https://feeny.ai/job/senior-security-engineer-garner-health-remote-k74djacge6tk)
- [Senior Security Engineer](https://feeny.ai/job/senior-security-engineer-sage-care-inc-hq-mszt832v9aa9) — HQ