Security Engineer – Application Security, GRC, AI

• Conduct security-focused code reviews to identify potential application vulnerabilities
• Investigate, prioritise and remediate security weaknesses across applications and services
• Collaborate directly with developers to implement secure coding practices and vulnerability fixes
• Work within Git/GitHub development workflows to review code and contribute to security improvements
• Coordinate external penetration testing engagements and security audits
• Track identified vulnerabilities and ensure timely remediation with engineering teams
• Assess application security risks and recommend practical technical solutions
• Develop, maintain and continuously improve the organisation's security risk register
• Identify and assess security exposure across internal systems, applications and third-party services
• Prioritise security improvements based on risk severity, operational requirements and business impact
• Support security governance processes, documentation and audit preparation
• Coordinate audit follow-up activities and track remediation progress
• Strengthen internal security controls and risk management procedures
• Monitor security alerts, emerging threats and relevant vulnerabilities
• Investigate suspicious activity and coordinate appropriate responses
• Organise security awareness initiatives and phishing simulations
• Communicate security risks, best practices and emerging threats to internal teams
• Provide occasional evening and weekend security monitoring coverage when required
• Support secure employee onboarding and offboarding procedures
• Review and manage user access permissions across internal systems
• Strengthen identity and access management controls
• Support device security management, including mobile device management (MDM)
• Identify opportunities to improve internal IT security processes and operational controls
• Monitor emerging security risks affecting generative AI applications and platforms
• Assess threats involving prompt injection, jailbreaks and content-filter bypasses
• Track security vulnerabilities and incidents associated with third-party AI providers
• Collaborate with engineering teams to identify and mitigate AI-related security risks
• Research emerging AI security techniques, tools and defensive approaches

• Minimum 2-3+ years of hands-on security engineering experience, with flexibility for exceptional candidates from fast-growing technology environments
• Strong practical experience in application security, including code reviews, vulnerability identification and remediation
• Proven experience conducting or coordinating security audits and penetration tests
• Ability to work directly with application code and development teams using Git/GitHub
• Practical scripting or automation experience, ideally using Python, Bash or equivalent technologies
• Previous experience within an AI company or a technology scale-up with at least 50 employees
• Sound understanding of security governance, risk assessment, vulnerability prioritisation and remediation processes
• Ability to develop or maintain security risk registers and support audit-related activities
• Strong technical problem-solving skills and an investigative, security-focused mindset
• Ability to independently identify, investigate and resolve security vulnerabilities
• Comfortable taking end-to-end ownership of security operations without relying on a large dedicated security team
• Strong collaboration skills when working with developers, engineering leadership and external security providers
• Excellent written and spoken English
• Ability to operate independently in a fast-paced, fully remote technology environment
• Willingness to provide occasional evening and weekend security monitoring coverage
• Willingness to work under a B2B contractor agreement
• Experience securing AI-powered applications, generative AI systems or LLM-based products preferred
• Previous responsibility as a sole, lead or independently operating Security Engineer preferred
• Experience within fast-growing AI startups or technology scale-ups preferred
• Practical use of AI tools for security research, code review, vulnerability analysis or workflow automation preferred
• Personal security research, ethical hacking projects or independent vulnerability discovery preferred
• Experience working across application security, governance, access management and security awareness preferred
• Familiarity with emerging AI security threats, including prompt injection and jailbreak techniques preferred

• Competitive compensation package based on experience and seniority
• Fully remote working arrangement from Europe
• B2B contractor engagement
• Opportunity to take full ownership of security operations for a rapidly growing AI platform with over 50 million users
• Direct collaboration with engineering leadership and senior technical stakeholders
• High level of autonomy and responsibility for security decisions and outcomes
• Opportunity to work across application security, governance, vulnerability management and emerging AI security challenges
• Exposure to large-scale consumer technology infrastructure and AI-powered products
• Hands-on technical environment focused on implementing practical security improvements
• International working environment within a rapidly growing technology organisation
• Opportunities for professional growth and development in application and AI security