Security Engineer (Application Security, GRC & AI)

Salve.Inno Consulting; Barcelona; Remote; EUR 70,000 - 120,000; Full time

Benefits offered by this job

Fully remote Europe

B2B contractor engagement

Ownership of security operations

Collaboration with leadership

Job summary

Salve.Inno Consulting is seeking a hands-on Security Engineer - Application Security, GRC & AI for its R&D team. You will own security operations end-to-end across applications, vulnerability management, governance, and AI-related threats at scale.

You will investigate vulnerabilities, review code, and collaborate with developers and leadership to implement fixes and secure coding practices. This role is fully remote within Europe and offers contractor engagement.

Qualifications

• Minimum 2-3+ years hands-on security engineering experience.
• Strong practical experience in application security, including code reviews and remediation.
• Proven experience with security audits and penetration tests.
• Ability to work directly with application code using Git/GitHub.
• Scripting automation with Python or Bash.
• Experience in AI company or large tech scale-up.

Responsibilities

• Conduct security-focused code reviews to identify vulnerabilities.
• Investigate and remediate security weaknesses across apps and services.
• Collaborate with developers to implement secure coding practices.
• Review code within Git/GitHub workflows and improve security.
• Coordinate external security assessments and audits.
• Track remediation progress with engineering teams.
• Develop and maintain security risk register.
• Assess risks across internal systems and third-party services.
• Prioritize security improvements by risk and impact.
• Support audit processes and governance activities.
• Organise security awareness and phishing simulations.
• Communicate risks and best practices to teams.
• Provide occasional after-hours monitoring coverage.

Skills

Application security

Code reviews

Vulnerability remediation

Git/GitHub

Penetration testing

Security governance

Risk assessment

Automation

Python

Bash

AI security

Security monitoring

Incident response

Security awareness

Tools

GitHub

Job description

About the Role

We are looking for a hands-on Security Engineer - Application Security, GRC & AI to join the R&D team of a rapidly growing international technology company serving more than 50 million users worldwide. As the company's sole dedicated Security Engineer, you will take end-to-end ownership of security operations, covering application security, vulnerability management, governance, risk assessment, internal IT security and emerging AI-related threats.

This is a highly technical and autonomous position requiring someone who can personally investigate vulnerabilities, review code, implement security improvements and collaborate directly with developers and engineering leadership. You will play a central role in protecting a large-scale AI-powered consumer platform, coordinating external security assessments, maintaining security governance processes and strengthening the organisation's overall security posture.

The ideal candidate combines strong application security expertise with practical coding skills, sound risk management judgment and the ability to independently identify and resolve security challenges. This is not a compliance-only or purely advisory role. We are looking for a proactive, technically capable Security Engineer who enjoys hands-on problem-solving and takes direct responsibility for security outcomes.

Key Responsibilities

• Conduct security-focused code reviews to identify potential application vulnerabilities.

• Investigate, prioritise and remediate security weaknesses across applications and services.

• Collaborate directly with developers to implement secure coding practices and vulnerability fixes.

• Work within Git/GitHub development workflows to review code and contribute to security improvements.

• Coordinate external penetration testing engagements and security audits.

• Track identified vulnerabilities and ensure timely remediation in collaboration with engineering teams.

• Assess application security risks and recommend practical technical solutions.

• Develop, maintain and continuously improve the organisation's security risk register.

• Identify and assess security exposure across internal systems, applications and third-party services.

• Prioritise security improvements based on risk severity, operational requirements and business impact.

• Support security governance processes, documentation and audit preparation.

• Coordinate audit follow-up activities and track remediation progress.

• Strengthen internal security controls and risk management procedures.

• Monitor security alerts, emerging threats and relevant vulnerabilities.

• Investigate suspicious activity and coordinate appropriate responses.

• Organise security awareness initiatives and phishing simulations.

• Communicate security risks, best practices and emerging threats to internal teams.

• Provide occasional evening and weekend security monitoring coverage when required.

• Support secure employee onboarding and offboarding procedures.

• Review and manage user access permissions across internal systems.

• Strengthen identity and access management controls.

• Support device security management, including mobile device management (MDM).

• Identify opportunities to improve internal IT security processes and operational controls.

• Monitor emerging security risks affecting generative AI applications and platforms.

• Assess potential threats involving prompt injection, jailbreaks and content-filter bypasses.

• Track security vulnerabilities and incidents associated with third-party AI providers.

• Collaborate with engineering teams to identify and mitigate AI-related security risks.

• Research emerging AI security techniques, tools and defensive approaches.

Requirements

• Minimum 2-3+ years of hands-on security engineering experience, with flexibility for exceptional candidates from fast-growing technology environments.

• Strong practical experience in application security, including code reviews, vulnerability identification and remediation.

• Proven experience conducting or coordinating security audits and penetration tests.

• Ability to work directly with application code and development teams using Git/GitHub.

• Practical scripting or automation experience, ideally using Python, Bash or equivalent technologies.

• Previous experience within an AI company or a technology scale-up with at least 50 employees.

• Sound understanding of security governance, risk assessment, vulnerability prioritisation and remediation processes.

• Ability to develop or maintain security risk registers and support audit-related activities.

• Strong technical problem-solving skills and an investigative, security-focused mindset.

• Ability to independently identify, investigate and resolve security vulnerabilities.

• Comfortable taking end-to-end ownership of security operations without relying on a large dedicated security team.

• Strong collaboration skills when working with developers, engineering leadership and external security providers.

• Excellent written and spoken English.

• Ability to operate independently in a fast-paced, fully remote technology environment.

• Willingness to provide occasional evening and weekend security monitoring coverage.

• Willingness to work under a B2B contractor agreement.

Preferred Qualifications

• Experience securing AI-powered applications, generative AI systems or LLM-based products.

• Previous responsibility as a sole, lead or independently operating Security Engineer.

• Experience within fast-growing AI startups or technology scale-ups.

• Practical use of AI tools for security research, code review, vulnerability analysis or workflow automation.

• Personal security research, ethical hacking projects or independent vulnerability discovery.

• Experience working across application security, governance, access management and security awareness.

• Familiarity with emerging AI security threats, including prompt injection and jailbreak techniques.

Benefits

• Competitive compensation package based on experience and seniority.

• Fully remote working arrangement from Europe.

• B2B contractor engagement.

• Opportunity to take full ownership of security operations for a rapidly growing AI platform with over 50 million users.

• Direct collaboration with engineering leadership and senior technical stakeholders.

• High level of autonomy and responsibility for security decisions and outcomes.

• Opportunity to work across application security, governance, vulnerability management and emerging AI security challenges.

• Exposure to large-scale consumer technology infrastructure and AI-powered products.

• Hands-on technical environment focused on implementing practical security improvements.

• International working environment within a rapidly growing technology organisation.

• Opportunities for professional growth and development in application and AI security.