Remote Security Engineer — AI Apps, GRC & Threats

Salve.Inno Consulting; Greater London; Remote; GBP 70,000 - 120,000; Full time

Benefits offered by this job

Fully remote from Europe

B2B contractor engagement

Ownership of security operations

Job summary

Salve.Inno Consulting is seeking a hands-on Security Engineer to lead application security, GRC and AI-focused security for a large-scale, AI-powered platform. You will own security operations end-to-end, collaborate with developers and leadership, and drive security improvements across the stack.

The role requires strong coding skills, threat awareness and governance experience, with the flexibility for evening/weekend monitoring and a B2B contractor setup.

Qualifications

• Minimum 2-3+ years of hands-on security engineering experience, with flexibility for exceptional candidates from fast-growing technology environments.
• Strong practical experience in application security, including code reviews, vulnerability identification and remediation.
• Proven experience conducting or coordinating security audits and penetration tests.
• Ability to work directly with application code and development teams using Git/GitHub.
• Practical scripting or automation experience, ideally using Python, Bash or equivalent technologies.
• Previous experience within an AI company or a technology scale-up with at least 50 employees.
• Sound understanding of security governance, risk assessment, vulnerability prioritisation and remediation processes.
• Ability to develop or maintain security risk registers and support audit-related activities.
• Strong technical problem-solving skills and an investigative, security-focused mindset.
• Ability to independently identify, investigate and resolve security vulnerabilities.
• Comfortable taking end-to-end ownership of security operations without relying on a large dedicated security team.
• Strong collaboration skills when working with developers, engineering leadership and external security providers.
• Excellent written and spoken English.
• Ability to operate independently in a fast-paced, fully remote technology environment.
• Willingness to provide occasional evening and weekend security monitoring coverage.
• Willingness to work under a B2B contractor agreement.

Responsibilities

• Conduct security-focused code reviews to identify potential application vulnerabilities.
• Investigate, prioritise and remediate security weaknesses across applications and services.
• Collaborate directly with developers to implement secure coding practices and vulnerability fixes.
• Work within Git/GitHub development workflows to review code and contribute to security improvements.
• Coordinate external penetration testing engagements and security audits.
• Track identified vulnerabilities and ensure timely remediation in collaboration with engineering teams.
• Assess application security risks and recommend practical technical solutions.
• Develop, maintain and continuously improve the organisation's security risk register.
• Identify and assess security exposure across internal systems, applications and third-party services.
• Prioritise security improvements based on risk severity, operational requirements and business impact.
• Support security governance processes, documentation and audit preparation.
• Coordinate audit follow-up activities and track remediation progress.
• Strengthen internal security controls and risk management procedures.
• Monitor security alerts, emerging threats and relevant vulnerabilities.
• Investigate suspicious activity and coordinate appropriate responses.
• Organise security awareness initiatives and phishing simulations.
• Communicate security risks, best practices and emerging threats to internal teams.
• Provide occasional evening and weekend security monitoring coverage when required.
• Support secure employee onboarding and offboarding procedures.
• Review and manage user access permissions across internal systems.
• Strengthen identity and access management controls.
• Support device security management, including mobile device management (MDM).
• Identify opportunities to improve internal IT security processes and operational controls.
• Monitor emerging security risks affecting generative AI applications and platforms.
• Assess potential threats involving prompt injection, jailbreaks and content-filter bypasses.
• Track security vulnerabilities and incidents associated with third-party AI providers.
• Collaborate with engineering teams to identify and mitigate AI-related security risks.
• Research emerging AI security techniques, tools and defensive approaches.

Skills

Application security

Code reviews

Vulnerability remediation

Security audits

Git/GitHub

Python scripting

Bash scripting

AI security

Governance & risk

Independent ownership

English communication

Tools

Git/GitHub

Python

Bash

Job description

Salve.Inno Consulting is seeking a hands-on Security Engineer to lead application security, GRC and AI-focused security for a large-scale, AI-powered platform. You will own security operations end-to-end, collaborate with developers and leadership, and drive security improvements across the stack.

The role requires strong coding skills, threat awareness and governance experience, with the flexibility for evening/weekend monitoring and a B2B contractor setup.