Security Engineer (Appsec / Grc / Ai Security)

David Kennedy Recruitment; Toscana; Remote; EUR 65,000 - 90,000; Full time

Benefits offered by this job

Fully remote working from Europe

Ownership of security for AI platform

Direct collaboration with engineering

Hands-on, real responsibility

Job summary

David Kennedy Recruitment is partnering with a rapidly growing technology company seeking a Security Engineer to own security operations across AppSec, GRC, and AI security. You will work as the sole security engineer, collaborating with engineering leadership on risk, audits, and incident response.

Role requires hands-on security engineering, code reviews, vulnerability remediation, and scripting (Python/Bash). Remote from Europe with 80% CET overlap; B2B engagement preferred.

Qualifications

• 2–3+ years hands-on security engineering experience.
• Strong application security experience, including code reviews and remediation.
• Experience conducting or coordinating security audits and penetration tests.
• Comfortable coding and working with Git/GitHub
• Scripting or automation skills (Python or Bash)
• Experience in AI security or with AI platforms is a plus
• Prior experience in a tech scale-up environment
• Excellent English communication skills
• Based in Europe with ~80% CET overlap
• Comfortable with occasional evening/weekend monitoring
• Able to handle adult/NSFW content as part of daily duties

Responsibilities

• Application security: review code, fix vulnerabilities, collaborate with developers on Git/GitHub, coordinate pen tests and audits.
• Governance, risk and compliance: maintain risk register, assess exposure, support audits, prioritise fixes by risk.
• Monitoring and awareness: track alerts, run awareness programs and phishing simulations, provide evening coverage.
• IT security and access: onboarding/offboarding, device security (MDM) and access controls.
• AI security: monitor generative AI risks and third-party AI provider vulnerabilities.

Skills

Security engineering

Application security

Vulnerability remediation

Security audits

Git/GitHub

Python

Bash

AI security

English communication

Fast-paced environment

Tools

Git/GitHub

Job description

David Kennedy Recruitment is working with a rapidly growing technology company with over 50 million users worldwide that is seeking to onboard a Security Engineer to join their R&D team.

As the company's sole dedicated Security Engineer, the successful candidate will take end-to-end ownership of security operations, covering application security, vulnerability management, governance and risk, and emerging AI security challenges. The company's products include adult/NSFW content, so candidates must be fully comfortable working with this material.

Position: Security Engineer (AppSec / GRC / AI Security)

Location: Europe/ASIA, Remote

Employment type: B2B engagement preferred

DUTIES AND RESPONSIBILITIES:

• Application security: review code, find and fix vulnerabilities, work with developers in Git/GitHub, and coordinate external pen tests and audits.

• Governance, risk and compliance: build and maintain the security risk register, assess exposure across systems, support audit follow-up, and prioritise fixes by risk and business impact.

• Monitoring and awareness: watch alerts and threats, run awareness programmes and phishing simulations, and provide occasional evening and weekend cover.

• IT security and access: handle secure onboarding and offboarding, device security (MDM) and access permissions, and tighten internal controls.

• AI security: track risks to generative AI platforms (prompt injection, jailbreaks, filter bypasses) and vulnerabilities in third-party AI providers.

REQUIREMENTS:

• 2–3+ years of hands‑on security engineering experience, with flexibility for exceptional scale‑up experience

• Strong application security experience, including code reviews and vulnerability remediation

• Proven experience conducting or coordinating security audits and penetration tests

• Comfortable coding and working directly with Git/GitHub

• Practical scripting or automation skills, ideally Python or Bash

• Previous experience within an AI company or a scale‑up with 50+ employees

• Sound understanding of security governance, risk assessment and prioritisation

• Ability to independently identify, investigate and resolve security issues, and to take end‑to‑end ownership in a fast‑paced environment

• Excellent English communication skills

• Based in Europe, with approximately 80% overlap with CET working hours

• Comfortable with occasional evening/weekend security monitoring

• Fully comfortable working with adult/NSFW content as part of daily responsibilities

BENEFITS:

• Fully remote working from Europe

• Opportunity to own security for a fast‑growing AI platform with over 50 million users

• Direct collaboration with engineering leadership

• Hands‑on, non‑advisory role with real responsibility for security outcomes

• And many more!!!