Security Engineer (Application Security, GRC & AI)

Salve.Lab; Germany; Remote; EUR 90,000 - 130,000; Full time

Benefits offered by this job

Fully remote (Europe)

B2B contract

Ownership of security ops

Job summary

Salve.Lab is seeking a hands-on Security Engineer to own application security, GRC and AI security for a fast‑growing AI platform. You will conduct code reviews, manage vulnerabilities, coordinate external assessments and work directly with developers and leadership.

The role requires practical security engineering across governance, risk, and vulnerabilities, with strong coding and automation skills. Fully remote from Europe; B2B contractor engagement.

Qualifications

• 2+ years hands-on security engineering
• Strong practical application security skills
• Experience with security audits/penetration tests
• Able to work with code and dev teams using GitHub
• Scripting or automation experience (Python/Bash)
• Experience in AI company or tech scale-up with 50+ employees
• Knowledge of security governance and risk remediation

Responsibilities

• Review security-focused code for vulnerabilities in applications.
• Investigate, prioritise and remediate security weaknesses.
• Collaborate with developers to implement secure coding practices.
• Review code within Git/GitHub workflows and contribute security improvements.
• Coordinate external security assessments and audits.
• Maintain security risk register and remediation tracking.
• Identify and mitigate AI security risks for generative AI apps.

Skills

Application security

Code reviews

Vulnerability remediation

Git/GitHub

Python scripting

Security governance

Threat modeling

Tools

Git/GitHub

Python

Bash

Job description

About The Role

We are looking for a hands-on

About The Role

We are looking for a hands-on Security Engineer - Application Security, GRC & AI to join the R&D team of a rapidly growing international technology company serving more than 50 million users worldwide. As the company's sole dedicated Security Engineer, you will take end-to-end ownership of security operations, covering application security, vulnerability management, governance, risk assessment, internal IT security and emerging AI-related threats. This is a highly technical and autonomous position requiring someone who can personally investigate vulnerabilities, review code, implement security improvements and collaborate directly with developers and engineering leadership. You will play a central role in protecting a large-scale AI-powered consumer platform, coordinating external security assessments, maintaining security governance processes and strengthening the organisation's overall security posture. The ideal candidate combines strong application security expertise with practical coding skills, sound risk management judgment and the ability to independently identify and resolve security challenges. This is not a compliance-only or purely advisory role. We are looking for a proactive, technically capable Security Engineer who enjoys hands‑on problem‑solving and takes direct responsibility for security outcomes.

Key Responsibilities

• Conduct security-focused code reviews to identify potential application vulnerabilities.
• Investigate, prioritise and remediate security weaknesses across applications and services.
• Collaborate directly with developers to implement secure coding practices and vulnerability fixes.
• Work within Git/GitHub development workflows to review code and contribute to security improvements.
• Coordinate external penetration testing engagements and security audits.
• Track identified vulnerabilities and ensure timely remediation in collaboration with engineering teams.
• Assess application security risks and recommend practical technical solutions.
• Develop, maintain and continuously improve the organisation's security risk register.
• Identify and assess security exposure across internal systems, applications and third‑party services.
• Prioritise security improvements based on risk severity, operational requirements and business impact.
• Support security governance processes, documentation and audit preparation.
• Coordinate audit follow‑up activities and track remediation progress.
• Strengthen internal security controls and risk management procedures.
• Monitor security alerts, emerging threats and relevant vulnerabilities.
• Investigate suspicious activity and coordinate appropriate responses.
• Organise security awareness initiatives and phishing simulations.
• Communicate security risks, best practices and emerging threats to internal teams.
• Provide occasional evening and weekend security monitoring coverage when required.
• Support secure employee onboarding and offboarding procedures.
• Review and manage user access permissions across internal systems.
• Strengthen identity and access management controls.
• Support device security management, including mobile device management (MDM).
• Identify opportunities to improve internal IT security processes and operational controls.
• Monitor emerging security risks affecting generative AI applications and platforms.
• Assess potential threats involving prompt injection, jailbreaks and content‑filter bypasses.
• Track security vulnerabilities and incidents associated with third‑party AI providers.
• Collaborate with engineering teams to identify and mitigate AI‑related security risks.
• Research emerging AI security techniques, tools and defensive approaches.

Requirements

• Minimum 2‑3+ years of hands‑on security engineering experience, with flexibility for exceptional candidates from fast‑growing technology environments.
• Strong practical experience in application security, including code reviews, vulnerability identification and remediation.
• Proven experience conducting or coordinating security audits and penetration tests.
• Ability to work directly with application code and development teams using Git/GitHub.
• Practical scripting or automation experience, ideally using Python, Bash or equivalent technologies.
• Previous experience within an AI company or a technology scale‑up with at least 50 employees.
• Sound understanding of security governance, risk assessment, vulnerability prioritisation and remediation processes.
• Ability to develop or maintain security risk registers and support audit‑related activities.
• Strong technical problem‑solving skills and an investigative, security‑focused mindset.
• Ability to independently identify, investigate and resolve security vulnerabilities.
• Comfortable taking end‑to‑end ownership of security operations without relying on a large dedicated security team.
• Strong collaboration skills when working with developers, engineering leadership and external security providers.
• Excellent written and spoken English.
• Ability to operate independently in a fast‑paced, fully remote technology environment.
• Willingness to provide occasional evening and weekend security monitoring coverage.
• Willingness to work under a B2B contractor agreement.

Preferred Qualifications

• Experience securing AI‑powered applications, generative AI systems or LLM‑based products.
• Previous responsibility as a sole, lead or independently operating Security Engineer.
• Experience within fast‑growing AI startups or technology scale‑ups.
• Practical use of AI tools for security research, code review, vulnerability analysis or workflow automation.
• Personal security research, ethical hacking projects or independent vulnerability discovery.
• Experience working across application security, governance, access management and security awareness.
• Familiarity with emerging AI security threats, including prompt injection and jailbreak techniques.

Benefits

• Competitive compensation package based on experience and seniority.
• Fully remote working arrangement from Europe.
• B2B contractor engagement.
• Opportunity to take full ownership of security operations for a rapidly growing AI platform with over 50 million users.
• Direct collaboration with engineering leadership and senior technical stakeholders.
• High level of autonomy and responsibility for security decisions and outcomes.
• Opportunity to work across application security, governance, vulnerability management and emerging AI security challenges.
• Exposure to large‑scale consumer technology infrastructure and AI‑powered products.
• Hands‑on technical environment focused on implementing practical security improvements.
• International working environment within a rapidly growing technology organisation.
• Opportunities for professional growth and development in application and AI security.