Senior AI Security Engineer (f/m/d)

SubjectWell, Inc.; Berlin; Remote; EUR 110,000 - 170,000; Full time

Benefits offered by this job

Development budget

Flexible hours

Team events

Job summary

Clariness GmbH in Germany is seeking a Senior AI Security Engineer to design and lead the security engineering function across applications, cloud infrastructure, and AI systems, establishing priorities and embedding robust controls from the start.

As the founding security hire, you will collaborate with engineering teams to implement secure development practices, perform threat modelling and pentesting, and ensure compliance with SOC 2 Type II, GDPR, and EU AI Act obligations while shaping the

Qualifications

• Minimum five years of hands-on security engineering or information security.
• Experience building a security program within a product engineering environment.
• Strong practical experience across application security, cloud security, secure SDLC, threat modelling, pentesting.
• Experience with LLM-powered apps, RAG systems or agentic pipelines.
• Hands-on experience with AI agents, sandboxing and privilege controls.
• Auditing/compliance experience including at least one SOC 2, GDPR program, or EU AI Act.
• English proficiency at C1 level in a regulated industry.

Responsibilities

• Defining Clariness' security engineering strategy and roadmap across application, cloud, AI and LLM security, vulnerability management, and tooling.
• Working with engineering teams on secure system design, threat modelling, penetration testing and remediation, embedding security in CI/CD.
• Owning AI security and governance across LLM-powered features, RAG systems and agentic pipelines, including OWASP Top 10 for LLM Apps.
• Designing safeguards for AI agents, including sandboxing, privilege/access controls, secure tool use and adversarial red teaming.
• Evaluating, deploying and improving AI-powered security automation, including autonomous vulnerability triage and AI-assisted threat intel.
• Assessing commercial/open-source security tools and developing custom solutions where needed.
• Managing Clariness' IT security compliance program – SOC 2 Type II, EU AI Act obligations, GDPR Article 32 technical measures, GxP IT security controls; act as security liaison for auditors.

Job description

Clariness is looking for a Senior AI Security Engineer (f/m/d) based Germany, UK, SA, or Serbia. Full-time; unlimited

About the role

This role is about building, operating and continuously improving Clariness' security capabilities across applications, cloud infrastructure and AI systems. As our founding-level security hire, you will establish the security engineering function, define its priorities and work directly with engineering teams to embed effective security controls throughout our technology environment.

As a Senior AI Security Engineer, you would be responsible for:

• Defining Clariness' security engineering strategy and roadmap, and building and operating the security function across application security, cloud security, AI and LLM security, vulnerability management and supporting security tooling.
• Working directly with engineering teams on secure system design, threat modelling, penetration testing and vulnerability remediation, while embedding appropriate security controls into development processes and CI/CD pipelines.
• Owning AI security and governance across LLM-powered features, RAG systems and agentic pipelines, including assessing and mitigating risks covered by the OWASP Top 10 for LLM Applications.
• Designing and validating safeguards for AI agents, including sandboxing, privilege and access controls, secure tool use and adversarial red teaming of AI systems.
• Evaluating, deploying and continuously improving AI-powered security automation, including autonomous vulnerability triage, LLM-powered alert analysis, compliance evidence gathering and AI-assisted threat intelligence.
• Assessing commercial and open-source security tools based on effectiveness, operational fit and cost, and developing custom solutions where existing tooling does not meet Clariness' requirements.
• Managing Clariness' IT security compliance programme—including SOC 2 Type II, applicable EU AI Act high-risk obligations, GDPR Article 32 technical measures and GxP IT security controls- while maintaining audit-ready documentation and acting as the primary security liaison for external auditors, regulators, Legal and Compliance.

We would like you to have:

• At least five years of hands-on experience in security engineering, application security or information security, with strong technical depth beyond advisory or governance responsibilities.
• Proven experience building or significantly developing a security programme within a product engineering environment, ideally as an early or founding security hire.
• Strong practical experience across application security, cloud security, secure software development, threat modelling, penetration testing, vulnerability management and security controls within CI/CD pipelines.
• Experience assessing, testing or implementing security controls for LLM-powered applications, RAG systems or agentic pipelines.
• Hands-on experience with AI agents, either building them for security automation or securing them through adversarial testing, sandboxing and privilege controls.
• Demonstrable compliance experience involving at least one SOC 2 audit cycle, GDPR programme ownership or implementation of EU AI Act requirements, including the ability to produce audit-ready documentation and work with external auditors.
• Experience in a regulated industry such as clinical research, pharmaceuticals, healthtech or fintech, with knowledge of GxP or comparable regulated data-handling requirements considered a strong advantage, alongside strong English communication skills at C1 level.

You may ask now, why should I work for you? Let us give you a few reasons – and you'll learn more during the process.

• A varied and exciting job with a lot of personal responsibility in an international company, where you can develop and expand your skills.
• Professional and personal development opportunities - incl. personal development budget.
• Flexible working hours and mobile working.
• Regular team events and open feedback culture.
• A versatile field of activity and challenging projects.
• A supportive and open company culture, providing the opportunity to collaborate with a diverse and professional team.
• Impact healthcare by accelerating medical innovation through improved access to clinical trials, potentially bringing needed treatments to patients faster.

At Clariness, we are proud to be an equal opportunity employer. We celebrate diversity and are committed to creating an inclusive environment for all employees, regardless of race, religion, gender, sexual orientation, national origin, disability or age. For more information, feel free to reach out to [e-mail].

Clariness GmbH will treat the above information strictly confidential and will especially observe the applicable provisions of the applicable data protection laws. Further information about the use of the applicant data, you will find in the data protection declaration online at https://www.clariness.com/privacy-policy/