Security Engineer – AppSec, GRC

• Assess the security of AI-powered products, applications, APIs and supporting infrastructure
• Embed security requirements and practices into the software development lifecycle, from design and development through deployment and maintenance
• Conduct or coordinate application security reviews, threat modelling, vulnerability assessments and penetration testing
• Identify, prioritise and support remediation of security vulnerabilities, including risks specific to AI systems and integrations
• Review AI system design and data flows for risks such as prompt injection, data leakage, insecure model access and misuse of outputs
• Develop and maintain secure coding standards, technical security guidance and AppSec policies
• Advise engineering teams on secure architecture, authentication, authorisation, encryption, secrets management and API security
• Support security controls for AI models, datasets, third-party services and model development or deployment workflows
• Establish and maintain security governance, risk and compliance processes for products, services and internal systems
• Contribute to risk assessments, control evaluations, audit evidence and remediation plans
• Help map security practices to relevant frameworks, standards and regulatory requirements
• Collaborate with privacy, legal, compliance and risk teams on data protection and responsible AI considerations
• Support security incident readiness and contribute to the investigation and resolution of application or AI-related security incidents
• Track security metrics, prepare reports and communicate risks, findings and recommendations to technical and non-technical stakeholders
• Keep up to date with application security practices, AI threats, security standards and relevant regulatory developments

• Professional experience in security engineering, application security, information security or a related field
• Experience assessing and securing web applications, APIs, cloud services or software platforms
• Understanding of secure software development, threat modelling, vulnerability management and security testing
• Knowledge of common application security risks and relevant testing approaches
• Experience with governance, risk and compliance activities, such as risk assessments, control reviews or audit support
• Familiarity with security frameworks and standards such as ISO 27001, NIST or SOC 2
• Understanding of cloud security, identity and access management, encryption and secure configuration principles
• Awareness of AI and machine learning security risks, including data, model and inference-time threats
• Ability to assess technical risks and explain their impact and remediation options clearly
• Strong analytical and problem-solving skills, with attention to detail and a practical approach to risk
• Ability to work collaboratively with engineering, product, data, legal and compliance teams
• Strong written and verbal communication skills, including the ability to prepare clear security documentation
• Ability to manage competing priorities and contribute effectively in a changing technology environment
• Experience with security testing tools, code scanning, cloud security platforms or GRC systems is an advantage
• Relevant security certifications or training are an advantage
• Fluent English, both written and spoken

• Opportunity to strengthen the security of AI-powered products and services
• Collaborative work with engineering, product, data, legal and compliance teams
• Meaningful involvement in application security and security governance initiatives
• Professional development in a rapidly evolving technology and security sector
• International and multidisciplinary working environment