Security Engineer (AppSec / GRC / AI Security)

Job description

Join the R&D team as the sole dedicated Security Engineer. Own end-to-end security operations covering application security, vulnerability management, governance and risk, and emerging AI security challenges. Remote role based in Europe/Asia. Duties: review code, remediate vulnerabilities and collaborate with developers via Git/GitHub; coordinate external penetration tests and audits; build and maintain the security risk register, assess system exposure, support audit follow‑up and prioritize fixes; monitor alerts and threats, run awareness programs and phishing simulations, provide occasional evening and weekend coverage; handle secure onboarding/offboarding, device security (MDM) and access permissions, tighten internal controls; track risks to generative AI platforms (prompt injection, jailbreaks, filter bypasses) and third‑party AI provider vulnerabilities.

Requirements

• 2–3+ years hands‑on security engineering experience
• strong application security experience including code reviews and vulnerability remediation
• proven experience conducting or coordinating security audits and penetration tests
• comfortable coding and working directly with Git/GitHub
• practical scripting or automation skills, preferably Python or Bash
• previous experience within an AI company or a scale‑up with 50+ employees
• sound understanding of security governance, risk assessment and prioritisation
• ability to independently identify, investigate and resolve security issues and take end‑to‑end ownership in a fast‑paced environment
• excellent English communication skills
• based in Europe with approximately 80% overlap with CET working hours
• comfortable with occasional evening/weekend security monitoring
• fully comfortable working with adult/NSFW content.

Skills