Security Engineer (Appsec / Grc / Ai Security)

David Kennedy Recruitment; Milano; Remote; EUR 70,000 - 95,000; Full time

Benefits offered by this job

Fully remote from Europe

Job summary

David Kennedy Recruitment is partnering with a rapid-growth tech company seeking a Security Engineer to own security operations across AppSec, GRC, and AI security. You will review code, coordinate pen tests, manage risk, and maintain security programs while working closely with developers and leadership.

The role is fully remote from Europe with 80% CET overlap, requiring 2–3+ years of hands-on security engineering, strong AppSec skills, scripting ability, and experience with security audits

Qualifications

• 2–3+ years of hands-on security engineering experience.
• Strong application security experience including code reviews and remediation.
• Proven experience conducting or coordinating security audits and penetration tests.
• Comfortable coding and working directly with Git/GitHub.
• Practical scripting or automation skills, ideally Python or Bash.
• Experience within AI company or a scale-up with 50+ employees.
• Understanding of security governance, risk assessment and prioritisation.
• Ability to independently identify and resolve security issues with end-to-end ownership.
• Excellent English communication skills.

Responsibilities

• Application security: review code, fix vulnerabilities, coordinate pen tests and audits.
• Governance, risk and compliance: maintain risk register and prioritize fixes by risk.

Skills

Security engineering

Code reviews

Vulnerability remediation

Penetration testing

Scripting (Python/Bash)

Git/GitHub

AI security

Threat monitoring

Tools

GitHub

Python

Bash

Job description

David Kennedy Recruitment is working with a rapidly growing technology company with over 50 million users worldwide that is seeking to onboard a Security Engineer to join their R&D team.

As the company's sole dedicated Security Engineer, the successful candidate will take end-to-end ownership of security operations, covering application security, vulnerability management, governance and risk, and emerging AI security challenges. The company's products include adult/NSFW content, so candidates must be fully comfortable working with this material.

Position: Security Engineer (AppSec / GRC / AI Security)

Location: Europe/ASIA, Remote

Employment type: B2B engagement preferred

DUTIES AND RESPONSIBILITIES:

• Application security: review code, find and fix vulnerabilities, work with developers in Git/GitHub, and coordinate external pen tests and audits.

• Governance, risk and compliance: build and maintain the security risk register, assess exposure across systems, support audit follow-up, and prioritise fixes by risk and business impact.

• Monitoring and awareness: watch alerts and threats, run awareness programmes and phishing simulations, and provide occasional evening and weekend cover.

• IT security and access: handle secure onboarding and offboarding, device security (MDM) and access permissions, and tighten internal controls.

• AI security: track risks to generative AI platforms (prompt injection, jailbreaks, filter bypasses) and vulnerabilities in third-party AI providers.

REQUIREMENTS:

• 2–3+ years of hands‑on security engineering experience, with flexibility for exceptional scale‑up experience

• Strong application security experience, including code reviews and vulnerability remediation

• Proven experience conducting or coordinating security audits and penetration tests

• Comfortable coding and working directly with Git/GitHub

• Practical scripting or automation skills, ideally Python or Bash

• Previous experience within an AI company or a scale‑up with 50+ employees

• Sound understanding of security governance, risk assessment and prioritisation

• Ability to independently identify, investigate and resolve security issues, and to take end‑to‑end ownership in a fast‑paced environment

• Excellent English communication skills

• Based in Europe, with approximately 80% overlap with CET working hours

• Comfortable with occasional evening/weekend security monitoring

• Fully comfortable working with adult/NSFW content as part of daily responsibilities

BENEFITS:

• Fully remote working from Europe

• Opportunity to own security for a fast‑growing AI platform with over 50 million users

• Direct collaboration with engineering leadership

• Hands‑on, non‑advisory role with real responsibility for security outcomes

• And many more!!!