Security Engineer: AppSec, GRC & AI Security (Remote Europe)

David Kennedy Recruitment; Milano; Remote; EUR 70,000 - 95,000; Full time

Benefits offered by this job

Fully remote from Europe

Job summary

David Kennedy Recruitment is partnering with a rapid-growth tech company seeking a Security Engineer to own security operations across AppSec, GRC, and AI security. You will review code, coordinate pen tests, manage risk, and maintain security programs while working closely with developers and leadership.

The role is fully remote from Europe with 80% CET overlap, requiring 2–3+ years of hands-on security engineering, strong AppSec skills, scripting ability, and experience with security audits

Qualifications

• 2–3+ years of hands-on security engineering experience.
• Strong application security experience including code reviews and remediation.
• Proven experience conducting or coordinating security audits and penetration tests.
• Comfortable coding and working directly with Git/GitHub.
• Practical scripting or automation skills, ideally Python or Bash.
• Experience within AI company or a scale-up with 50+ employees.
• Understanding of security governance, risk assessment and prioritisation.
• Ability to independently identify and resolve security issues with end-to-end ownership.
• Excellent English communication skills.

Responsibilities

• Application security: review code, fix vulnerabilities, coordinate pen tests and audits.
• Governance, risk and compliance: maintain risk register and prioritize fixes by risk.

Skills

Security engineering

Code reviews

Vulnerability remediation

Penetration testing

Scripting (Python/Bash)

Git/GitHub

AI security

Threat monitoring

Tools

GitHub

Python

Bash

Job description

David Kennedy Recruitment is partnering with a rapid-growth tech company seeking a Security Engineer to own security operations across AppSec, GRC, and AI security. You will review code, coordinate pen tests, manage risk, and maintain security programs while working closely with developers and leadership.

The role is fully remote from Europe with 80% CET overlap, requiring 2–3+ years of hands-on security engineering, strong AppSec skills, scripting ability, and experience with security audits