Security Engineer (AppSec / GRC / AI Security)

David Kennedy Recruitment; Paris; Remote; EUR 60,000 - 100,000; Full time

Benefits offered by this job

Fully remote

Job summary

David Kennedy Recruitment is seeking a Security Engineer to join a rapidly growing technology company’s R&D team. You will own security operations end‑to‑end, including AppSec, GRC, and AI security, with responsibility for secure coding, audits, and risk management.

The role requires comfort with adult/NSFW content, remote collaboration across Europe/Asia, and direct collaboration with engineering leadership in a fast‑paced environment.

Qualifications

• 2–3+ years hands‑on security engineering experience.

Responsibilities

• Application security: review code, fix vulnerabilities, coordinate external pen tests and audits.
• Governance, risk and compliance: maintain risk register, assess exposure, prioritise fixes by risk.
• Monitoring and awareness: watch alerts, run phishing simulations, occasional evening/weekend cover.
• IT security and access: onboarding/offboarding, device security (MDM) and access controls.
• AI security: track risks to generative AI platforms and third‑party providers.

Skills

Security engineering

Application security

Penetration testing

Git/GitHub

Python

Bash

AI security

Governance, risk & compliance

End-to-end ownership

English communication

Tools

Git

GitHub

Python

Bash

Job description

David Kennedy Recruitment is working with a rapidly growing technology company with over 50 million users worldwide that is seeking to onboard a Security Engineer to join their R&D team.

As the company's sole dedicated Security Engineer, the successful candidate will take end-to-end ownership of security operations, covering application security, vulnerability management, governance and risk, and emerging AI security challenges. The company's products include adult/NSFW content, so candidates must be fully comfortable working with this material.

Position: Security Engineer (AppSec / GRC / AI Security)

Location: Europe/ASIA, Remote

Employment type: B2B engagement preferred

DUTIES AND RESPONSIBILITIES:

• Application security: review code, find and fix vulnerabilities, work with developers in Git/GitHub, and coordinate external pen tests and audits.

• Governance, risk and compliance: build and maintain the security risk register, assess exposure across systems, support audit follow-up, and prioritise fixes by risk and business impact.

• Monitoring and awareness: watch alerts and threats, run awareness programmes and phishing simulations, and provide occasional evening and weekend cover.

• IT security and access: handle secure onboarding and offboarding, device security (MDM) and access permissions, and tighten internal controls.

• AI security: track risks to generative AI platforms (prompt injection, jailbreaks, filter bypasses) and vulnerabilities in third-party AI providers.

REQUIREMENTS:

• 2–3+ years of hands‑on security engineering experience, with flexibility for exceptional scale‑up experience

• Strong application security experience, including code reviews and vulnerability remediation

• Proven experience conducting or coordinating security audits and penetration tests

• Comfortable coding and working directly with Git/GitHub

• Practical scripting or automation skills, ideally Python or Bash

• Previous experience within an AI company or a scale‑up with 50+ employees

• Sound understanding of security governance, risk assessment and prioritisation

• Ability to independently identify, investigate and resolve security issues, and to take end‑to‑end ownership in a fast‑paced environment

• Excellent English communication skills

• Based in Europe, with approximately 80% overlap with CET working hours

• Comfortable with occasional evening/weekend security monitoring

• Fully comfortable working with adult/NSFW content as part of daily responsibilities

BENEFITS:

• Fully remote working from Europe

• Opportunity to own security for a fast-growing AI platform with over 50 million users

• Direct collaboration with engineering leadership

• Hands‑on, non‑advisory role with real responsibility for security outcomes

• And many more!!!