Security Engineer (Appsec / Grc / Ai Security)

David Kennedy Recruitment; Puglia; Remote; EUR 60,000 - 90,000; Full time

Benefits offered by this job

Fully remote working from Europe

Own security for a fast-growing AI平台

Direct collaboration with engineering

Hands-on, security-focused role

Job summary

David Kennedy Recruitment collaborates with a rapidly growing technology company seeking a dedicated Security Engineer to own security operations across AppSec, GRC, and AI security. You will work remotely from Europe, collaborating closely with engineering leadership to manage vulnerabilities, audits, and governance in a fast-paced environment.

The role requires strong coding skills (Git/GitHub), scripting (Python/Bash), and experience with AI security challenges.

Qualifications

• 2–3+ years hands-on security engineering experience.
• Strong application security experience including code reviews and remediation.
• Proven experience conducting or coordinating security audits and penetration tests.
• Comfortable coding and working directly with Git/GitHub.
• Practical scripting or automation skills (Python or Bash).
• Experience in AI context or scale-ups with 50+ employees is preferred.
• Solid understanding of security governance, risk assessment and prioritisation.
• Ability to own security issues end-to-end in a fast-paced environment.
• Excellent English communication skills.
• Based in Europe with ~80% CET overlap.
• Willingness for occasional evening/weekend monitoring.
• Comfortable handling adult/NSFW content as part of daily work.

Responsibilities

• Application security: review code, fix vulnerabilities, coordinate external pen tests and audits.
• Governance, risk and compliance: maintain risk register, assess exposure, prioritise fixes by risk and business impact.
• Monitoring and awareness: watch alerts, run phishing simulations, provide after-hours coverage as needed.
• IT security and access: onboarding/offboarding, device security (MDM) and access controls.
• AI security: track risks to generative AI platforms and third-party providers.

Skills

English proficiency

Ownership

Security governance

Vulnerability remediation

Code reviews

Audits

Scale-up experience

Tools

Git/GitHub

Python

Bash

Job description

David Kennedy Recruitment is working with a rapidly growing technology company with over 50 million users worldwide that is seeking to onboard a Security Engineer to join their R&D team.

As the company's sole dedicated Security Engineer, the successful candidate will take end-to-end ownership of security operations, covering application security, vulnerability management, governance and risk, and emerging AI security challenges. The company's products include adult/NSFW content, so candidates must be fully comfortable working with this material.

Position: Security Engineer (AppSec / GRC / AI Security)

Location: Europe/ASIA, Remote

Employment type: B2B engagement preferred

DUTIES AND RESPONSIBILITIES:

• Application security: review code, find and fix vulnerabilities, work with developers in Git/GitHub, and coordinate external pen tests and audits.

• Governance, risk and compliance: build and maintain the security risk register, assess exposure across systems, support audit follow-up, and prioritise fixes by risk and business impact.

• Monitoring and awareness: watch alerts and threats, run awareness programmes and phishing simulations, and provide occasional evening and weekend cover.

• IT security and access: handle secure onboarding and offboarding, device security (MDM) and access permissions, and tighten internal controls.

• AI security: track risks to generative AI platforms (prompt injection, jailbreaks, filter bypasses) and vulnerabilities in third-party AI providers.

REQUIREMENTS:

• 2–3+ years of hands‑on security engineering experience, with flexibility for exceptional scale‑up experience

• Strong application security experience, including code reviews and vulnerability remediation

• Proven experience conducting or coordinating security audits and penetration tests

• Comfortable coding and working directly with Git/GitHub

• Practical scripting or automation skills, ideally Python or Bash

• Previous experience within an AI company or a scale‑up with 50+ employees

• Sound understanding of security governance, risk assessment and prioritisation

• Ability to independently identify, investigate and resolve security issues, and to take end‑to‑end ownership in a fast‑paced environment

• Excellent English communication skills

• Based in Europe, with approximately 80% overlap with CET working hours

• Comfortable with occasional evening/weekend security monitoring

• Fully comfortable working with adult/NSFW content as part of daily responsibilities

BENEFITS:

• Fully remote working from Europe

• Opportunity to own security for a fast‑growing AI platform with over 50 million users

• Direct collaboration with engineering leadership

• Hands‑on, non‑advisory role with real responsibility for security outcomes

• And many more!!!