Security Engineer (AppSec / GRC / AI Security)

About the role

David Kennedy Recruitment is working with a rapidly growing technology company with over 50 million users worldwide that is seeking to onboard a Security Engineer to join their R&D team.

As the company's sole dedicated Security Engineer, the successful candidate will take end-to-end ownership of security operations, covering application security, vulnerability management, governance and risk, and emerging AI security challenges. The company's products include adult/NSFW content, so candidates must be fully comfortable working with this material.

Position: Security Engineer (AppSec / GRC / AI Security)

Location: Europe/ASIA, Remote

Employment type: B2B engagement preferred

DUTIES AND RESPONSIBILITIES:

Application security: review code, find and fix vulnerabilities, work with developers in Git/GitHub, and coordinate external pen tests and audits.

Governance, risk and compliance: build and maintain the security risk register, assess exposure across systems, support audit follow-up, and prioritise fixes by risk and business impact.

Monitoring and awareness: watch alerts and threats, run awareness programmes and phishing simulations, and provide occasional evening and weekend cover.

IT security and access: handle secure onboarding and offboarding, device security (MDM) and access permissions, and tighten internal controls.

AI security: track risks to generative AI platforms (prompt injection, jailbreaks, filter bypasses) and vulnerabilities in third-party AI providers.

REQUIREMENTS:

2–3+ years of hands-on security engineering experience, with flexibility for exceptional scale-up experience

Strong application security experience, including code reviews and vulnerability remediation

Proven experience conducting or coordinating security audits and penetration tests

Comfortable coding and working directly with Git/GitHub

Practical scripting or automation skills, ideally Python or Bash

Previous experience within an AI company or a scale-up with 50+ employees

Sound understanding of security governance, risk assessment and prioritisation

Ability to independently identify, investigate and resolve security issues, and to take end-to-end ownership in a fast-paced environment

Excellent English communication skills

Based in Europe, with approximately 80% overlap with CET working hours

Comfortable with occasional evening/weekend security monitoring

Fully comfortable working with adult/NSFW content as part of daily responsibilities

BENEFITS:

Fully remote working from Europe

Opportunity to own security for a fast-growing AI platform with over 50 million users

Direct collaboration with engineering leadership

Hands-on, non-advisory role with real responsibility for security outcomes

And many more!!!

Posting text as published by Davidkennedyrecruitment.

The evidence behind this listing

Workplace

Remote Employer field

Seniority

Not established

Employment type

full time

Location as listed

Paris, 75004, FR; Islington, London, GB; Lisbon, 1150-234, PT; Milan, IT; Rome, IT; Berlin, 10178, DE; Athens, 105 52, GR; Barcelona, 08002, ES; Bari, IT; Split, HR; Copenhagen, DK; Oslo, NO; Tallinn, 10111, EE; Limassol, CY; Budapest, HU; Florence, IT; Amsterdam, 1011 PL, NL; Stockholm, SE; Warsaw, 03, PL; Kraków, 30, PL; Lublin, 20, PL; Opole, 46, PL; Tokyo, 168-0063, JP; Seoul, KR; Beijing, CN; Taipei City, TW; Hong Kong, HK; Chongqing, CN; Bangkok, 10200, TH; Manila, 1001, PH; Kuala Lumpur, 50490, MY; Singapore, SG; Hanoi, VN; Hanover, 30159, DE; Wuhan, CN; Shanghai, CN; Hangzhou, CN; Mumbai, IN; Doha, QA; Tel Aviv-Yafo, IL; Riyadh, SA; Madrid, EMEA, ES

Pay and work authorization

Stated pay

Not stated

Visa sponsorship

Not stated

Security clearance

Not established

Citizenship

Not established