AI Security Engineer: App Security & GRC Lead

Salve.Inno Consulting; Kraków; Remote; PLN 190,000 - 270,000; Full time

Benefits offered by this job

Fully remote from Europe

B2B contractor engagement

Ownership of security operations

Collaboration with engineering leaders

Job summary

Salve.Inno Consulting is seeking a hands-on Security Engineer to own security operations across applications, governance, risk assessment and AI-related security for a rapidly growing tech platform serving millions of users. You will code-review, remediate vulnerabilities and collaborate with developers to enforce secure coding practices.

The role requires hands-on problem solving, independent ownership, and a proactive approach in a fully remote European environment.

Qualifications

• 2–3+ years of hands-on security engineering experience.
• Strong practical experience in application security, including code reviews and remediation.
• Experience conducting or coordinating security audits and penetration tests.
• Experience with Git/GitHub in a development environment.
• Scripting or automation experience (Python, Bash).
• Experience in an AI company or scale-up with 50+ employees.

Responsibilities

• Conduct security-focused code reviews to identify vulnerabilities.
• Investigate, prioritise and remediate security weaknesses across applications and services.
• Collaborate directly with developers to implement secure coding practices and vulnerability fixes.
• Work within Git/GitHub development workflows to review code and contribute to security improvements.
• Coordinate external penetration testing engagements and security audits.
• Track identified vulnerabilities and ensure timely remediation in collaboration with engineering teams.
• Assess application security risks and recommend practical technical solutions.
• Develop, maintain and continuously improve the organisation's security risk register.
• Identify and assess security exposure across internal systems, applications and third-party services.
• Prioritise security improvements based on risk severity, operational requirements and business impact.
• Support security governance processes, documentation and audit preparation.
• Coordinate audit follow-up activities and track remediation progress.
• Strengthen internal security controls and risk management procedures.
• Monitor security alerts, emerging threats and relevant vulnerabilities.
• Investigate suspicious activity and coordinate appropriate responses.
• Organise security awareness initiatives and phishing simulations.
• Communicate security risks, best practices and emerging threats to internal teams.
• Provide occasional evening and weekend security monitoring coverage when required.
• Support secure employee onboarding and offboarding procedures.
• Review and manage user access permissions across internal systems.
• Strengthen identity and access management controls.
• Support device security management, including mobile device management (MDM).
• Identify opportunities to improve internal IT security processes and operational controls.
• Monitor emerging security risks affecting generative AI applications and platforms.
• Assess potential threats involving prompt injection, jailbreaks and content-filter bypasses.
• Track security vulnerabilities and incidents associated with third-party AI providers.
• Collaborate with engineering teams to identify and mitigate AI-related security risks.
• Research emerging AI security techniques, tools and defensive approaches.

Skills

Application security

Code reviews

Vulnerability remediation

Security audits

Penetration testing

Git/GitHub

Python scripting

Bash scripting

AI security

Independent ownership

English communication

Tools

GitHub

Job description

Salve.Inno Consulting is seeking a hands-on Security Engineer to own security operations across applications, governance, risk assessment and AI-related security for a rapidly growing tech platform serving millions of users. You will code-review, remediate vulnerabilities and collaborate with developers to enforce secure coding practices.

The role requires hands-on problem solving, independent ownership, and a proactive approach in a fully remote European environment.