Security Engineer (AppSec / GRC / AI Security)
David Kennedy Recruitment
China, Croatia, Cyprus, Denmark, Estonia +25 moreremotePosted 13 days ago
Skill Required
Security-EngineerApplication-Security-EngineerGRC-SpecialistAI-Security-EngineerCybersecurity-EngineerAI-Application-Security-EngineerSoftware-Security-EngineerAppSec-EngineerSecurity-Software-EngineerProduct-Security-EngineerAI EngineerSecurity EngineersecurityAIGenerative AIEngineeringautomationObservabilityPythonGitShell ScriptingandContract
Key highlights
- 2–3+ years of hands-on security engineering experience required
- Fully remote working from Europe
- Opportunity to own security for a fast-growing AI platform with over 50 million users
- Must be fully comfortable working with adult/NSFW content
Role overview
David Kennedy Recruitment is partnering with a rapidly growing technology company that serves over 50 million users worldwide. The organization is seeking a Security Engineer (AppSec / GRC / AI Security) to serve as its sole dedicated security professional, taking full ownership of security operations across application security, vulnerability management, governance and risk, and emerging AI security challenges.
Responsibilities
- Take end-to-end ownership of security operations covering application security, vulnerability management, governance and risk, and emerging AI security challenges
- Review code, find and fix vulnerabilities, and collaborate with developers in Git/GitHub
- Coordinate external penetration tests and audits
- Build and maintain the security risk register
- Assess exposure across systems
- Support audit follow-up and prioritize fixes by risk and business impact
- Monitor alerts and threats
- Run awareness programs and phishing simulations
- Provide occasional evening and weekend security monitoring and cover
- Handle secure onboarding and offboarding processes
- Manage device security (MDM) and access permissions
- Tighten internal controls
- Track risks to generative AI platforms such as prompt injection, jailbreaks, and filter bypasses
- Address vulnerabilities in third-party AI providers
Requirements
- 2–3+ years of hands-on security engineering experience, with flexibility for exceptional scale-up experience
- Strong application security experience including code reviews and vulnerability remediation
- Proven experience conducting or coordinating security audits and penetration tests
- Comfortable coding and working directly with Git/GitHub
- Practical scripting or automation skills, ideally Python or Bash
- Previous experience within an AI company or a scale-up with 50+ employees
- Sound understanding of security governance, risk assessment and prioritisation
- Ability to independently identify, investigate and resolve security issues and take end-to-end ownership in a fast-paced environment
- Excellent English communication skills
- Based in Europe with approximately 80% overlap with CET working hours
- Comfortable with occasional evening/weekend security monitoring
- Fully comfortable working with adult/NSFW content as part of daily responsibilities
Nice to have
- Practical scripting or automation skills, ideally Python or Bash
Benefits
- Fully remote working from Europe
- Opportunity to own security for a fast-growing AI platform with over 50 million users
- Direct collaboration with engineering leadership
- Hands-on, non-advisory role with real responsibility for security outcomes
Additional details
- Rapidly growing technology company with over 50 million users worldwide
- Sole dedicated Security Engineer role
- B2B engagement preferred
- Location options: Europe/ASIA, Remote