Sole Security Engineer: AI App Security & GRC (Remote)

Salve.Inno Consulting; England; Remote; GBP 85,000 - 130,000; Full time

Benefits offered by this job

Remote work Europe

B2B contract

Ownership of security operations

Collaboration with leadership

Job summary

Salve.Inno Consulting is seeking a hands-on Security Engineer to own application security, governance and AI-related risk for a fast-growing tech platform serving millions of users. You will conduct code reviews, address vulnerabilities and coordinate audits in a fully remote setup across Europe.

The role requires strong coding and security skills, collaboration with engineering leadership and a proactive mindset to independently drive security improvements and incident response.

Qualifications

• Minimum 2–3+ years of hands-on security engineering experience, with flexibility for exceptional candidates from fast-growing technology environments.
• Strong practical experience in application security, including code reviews, vulnerability identification and remediation.
• Proven experience conducting or coordinating security audits and penetration tests.
• Ability to work directly with application code and development teams using Git/GitHub.
• Practical scripting or automation experience, ideally using Python, Bash or equivalent technologies.

Responsibilities

• Conduct security-focused code reviews to identify potential application vulnerabilities.
• Investigate, prioritise and remediate security weaknesses across applications and services.
• Collaborate directly with developers to implement secure coding practices and vulnerability fixes.
• Work within Git/GitHub development workflows to review code and contribute to security improvements.
• Coordinate external penetration testing engagements and security audits.
• Track identified vulnerabilities and ensure timely remediation in collaboration with engineering teams.
• Assess application security risks and recommend practical technical solutions.
• Develop, maintain and continuously improve the organisation's security risk register.
• Identify and assess security exposure across internal systems, applications and third-party services.
• Prioritise security improvements based on risk severity, operational requirements and business impact.
• Support security governance processes, documentation and audit preparation.
• Coordinate audit follow-up activities and track remediation progress.
• Strengthen internal security controls and risk management procedures.
• Monitor security alerts, emerging threats and relevant vulnerabilities.
• Investigate suspicious activity and coordinate appropriate responses.
• Organise security awareness initiatives and phishing simulations.
• Communicate security risks, best practices and emerging threats to internal teams.
• Provide occasional evening and weekend security monitoring coverage when required.
• Support secure employee onboarding and offboarding procedures.
• Review and manage user access permissions across internal systems.
• Strengthen identity and access management controls.
• Support device security management, including mobile device management (MDM).
• Identify opportunities to improve internal IT security processes and operational controls.
• Monitor emerging security risks affecting generative AI applications and platforms.
• Assess potential threats involving prompt injection, jailbreaks and content-filter bypasses.
• Track security vulnerabilities and incidents associated with third-party AI providers.
• Collaborate with engineering teams to identify and mitigate AI-related security risks.
• Research emerging AI security techniques, tools and defensive approaches.

Skills

Application security

Code review

Vulnerability management

Penetration testing

Security audits

Git/GitHub

Python

Bash

AI security

Risk assessment

Job description

Salve.Inno Consulting is seeking a hands-on Security Engineer to own application security, governance and AI-related risk for a fast-growing tech platform serving millions of users. You will conduct code reviews, address vulnerabilities and coordinate audits in a fully remote setup across Europe.

The role requires strong coding and security skills, collaboration with engineering leadership and a proactive mindset to independently drive security improvements and incident response.