Security Engineer (AppSec / GRC / AI Security)

Jobgether; Ireland; Remote; EUR 65,000 - 115,000; Full time

Benefits offered by this job

Fully remote from Europe

Ownership of security function

Direct access to leadership

Hands-on security impact

Broad security scope (AppSec, GRC, AI)

High autonomy

B2B contracting preferred

Job summary

Jobgether in Ireland is seeking a Security Engineer (AppSec / GRC / AI Security) to own security across a rapidly growing tech platform used by millions. You will work side-by-side with engineering leadership to identify vulnerabilities, implement remediations, and drive security across development workflows.

The role emphasizes hands-on application security, risk governance, and AI security, with high autonomy to shape security strategy and respond to evolving threats.

Qualifications

• Min 2–3 years hands-on security engineering experience.
• Strong application security, code review, remediation.
• Experience with security audits and penetration tests.
• Comfort with code, Git, and GitHub collaboration.
• Scripting/automation with Python or Bash.
• Experience in an AI-focused company or scale-up (>50 employees).
• Understanding of security governance, risk assessment and remediation planning.
• Familiarity with AI security risks, prompt injection and third-party AI integrations.
• IT security fundamentals: IAM, device security, lifecycle controls.
• Ability to work independently and own initiatives in fast-moving environments.
• Excellent English communication with technical stakeholders.
• Based in Europe with CET overlap; occasional after-hours coverage.
• Comfort with adult or NSFW content as part of platform responsibilities.

Responsibilities

• Review code for vulnerabilities, implement remediations, collaborate with developers via Git and GitHub workflows.
• Coordinate external penetration tests, security assessments, and audits; track findings to resolution.
• Build and maintain security risk register; prioritize remediation by risk and business impact.
• Monitor security alerts, investigate threats, respond to incidents and coverage when needed.
• Develop and maintain employee security awareness programs and phishing simulations.
• Manage secure onboarding/offboarding, device security and MDM, internal access controls.
• Identify and monitor AI security vulnerabilities in generative AI platforms.
• Own security operations; identify gaps and drive practical remediation processes.
• Collaborate with engineering leadership to integrate security into development workflows.
• Stay informed on emerging threats and industry best practices.

Skills

Security engineering

Application security

Vulnerability management

Scripting (Python/Bash)

Git / GitHub workflows

AI security

Problem solving

English communication

Independent ownership

Security governance & risk

Tools

Git

GitHub

Python

Bash

Job description

This position is listed on behalf of a partner company, which manages all applications and next steps. Our partner is looking for a Security Engineer (AppSec / GRC / AI Security) based in Ireland.

As a Security Engineer, you will take end-to-end ownership of security across a rapidly growing technology platform serving more than 50 million users worldwide. This hands–on role combines application security, vulnerability management, governance, risk, and compliance, with a growing focus on emerging AI security threats. You will work closely with engineering leadership and development teams to identify vulnerabilities, strengthen internal controls, and build robust security practices. As the sole dedicated Security Engineer, you will have significant autonomy to shape security strategy, prioritize risks, and drive remediation from discovery through resolution. You will also help protect AI-powered systems against evolving threats, including prompt injection, jailbreaks, and third–party provider vulnerabilities. This is an opportunity to make a direct impact in a fast–paced technology environment where technical expertise, independent ownership, and practical problem–solving are essential.

Accountabilities

• Application security: Review code, identify vulnerabilities, recommend and implement remediation measures, and collaborate directly with developers through Git and GitHub workflows.
• Security testing: Coordinate external penetration tests, security assessments, and audits, ensuring findings are documented, prioritized, and resolved effectively.
• Governance, risk, and compliance: Build and maintain the security risk register, assess exposure across systems, support audit follow–ups, and prioritize remediation based on risk severity and business impact.
• Security monitoring and threat management: Monitor security alerts, investigate potential threats, respond to emerging incidents, and provide occasional evening and weekend coverage when required.
• Security awareness: Develop and maintain employee security awareness initiatives, conduct phishing simulations, and promote secure working practices across the organization.
• IT security and access management: Manage secure employee onboarding and offboarding, device security and mobile device management (MDM), access permissions, and internal security controls.
• AI security: Identify and monitor vulnerabilities affecting generative AI platforms, including prompt injection, jailbreaks, safety–filter bypasses, and risks associated with third–party AI providers.
• Security operations ownership: Independently identify security gaps, investigate incidents, coordinate remediation, and establish practical security processes that evolve alongside the platform.
• Cross–functional collaboration: Work closely with engineering leadership and development teams to integrate security into development workflows and ensure security decisions align with technical requirements and business priorities.
• Continuous improvement: Stay informed about emerging cybersecurity threats, AI security developments, and industry best practices to strengthen the platform's overall security posture.

Requirements

• At least 2–3 years of hands–on experience in security engineering, application security, or a closely related cybersecurity role, with flexibility for candidates who demonstrate exceptional experience in a scale–up environment.
• Strong application security expertise, including code reviews, vulnerability identification, security testing, and practical remediation.
• Proven experience conducting or coordinating security audits and penetration tests, including tracking findings through to resolution.
• Comfortable working directly with code, Git, and GitHub, with the ability to collaborate effectively with software engineers.
• Practical scripting or automation skills, preferably using Python or Bash, to improve security workflows and operational efficiency.
• Previous experience working in an AI–focused company or a technology scale–up with more than 50 employees.
• Solid understanding of security governance, risk assessment, vulnerability prioritization, and remediation planning.
• Familiarity with AI security risks, particularly those associated with generative AI systems, prompt injection, jailbreaks, and third–party AI integrations.
• Strong understanding of IT security fundamentals, including identity and access management, device security, employee lifecycle controls, and internal security policies.
• Ability to work independently, take end–to–end ownership of security initiatives, and make sound decisions in a fast–moving environment with limited supervision.
• Strong analytical and problem–solving skills, with the ability to assess technical vulnerabilities and translate them into clear, actionable recommendations.
• Excellent English communication skills and the ability to collaborate effectively with technical stakeholders and leadership.
• Based in Europe and able to maintain approximately 80% overlap with Central European Time (CET) working hours.
• Willingness to provide occasional evening and weekend security monitoring coverage when necessary.
• Full comfort working with adult or NSFW content, as this material forms part of the platform's products and day–to–day responsibilities.

Benefits

• Competitive annual compensation: €65,000–€85,000 gross for mid–level candidates and €85,000–€115,000 gross for senior candidates, depending on experience and seniority.
• Fully remote work: Work remotely from Europe, with the flexibility to organize your work around agreed collaboration hours.
• Significant ownership: Take responsibility for the security function of a rapidly growing AI–powered platform serving more than 50 million users.
• Direct access to leadership: Collaborate closely with engineering leadership and influence technical priorities and security decisions.
• Hands–on impact: Work in a practical, execution–focused role where you can implement solutions and directly improve security outcomes rather than providing advisory recommendations alone.
• Broad technical scope: Gain exposure to application security, governance and risk management, security operations, and emerging AI security challenges.
• High–autonomy environment: Shape security processes, establish priorities, and build scalable practices as the organization continues to grow.
• Flexible engagement structure: B2B contracting is preferred, offering a potential arrangement suited to experienced professionals working remotely.

How Jobgether works:

We use an AI–powered matching process to ensure your application is reviewed quickly, objectively, and fairly against the role's core requirements. Our system identifies the top–fitting candidates, and this shortlist is then shared directly with the hiring company. The final decision and next steps (interviews, assessments) are managed by their internal team.

We appreciate your interest and wish you the best!

Data Privacy Notice: By submitting your application, you acknowledge that Jobgether will process your personal data to evaluate your candidacy and share relevant information with the hiring employer. This processing is based on legitimate interest and pre–contractual measures under applicable data protection laws (including GDPR). You may exercise your rights (access, rectification, erasure, objection) at any time.