Security Engineer (AppSec / GRC / AI Security)

OpenKrill; United States; Presencial; USD 101.000 - 146.000; Jornada completa

Ventajas ofrecidas por este puesto de trabajo

Fully remote (Europe)

Direct collaboration with engineering

Hands-on, non-advisory role

Security ownership & impact

Descripción de la vacante

Openkrill is seeking a Security Engineer to own security operations across AppSec, GRC, and AI security for a fast-growing AI platform serving millions of users. You will review code, coordinate pen tests, and lead risk management while working closely with engineering leadership in a fully remote setup.

You will handle security monitoring, governance, and incident readiness, with a strong emphasis on end-to-end ownership in a dynamic, scale-up environment.

Formación

• 2–3+ years hands-on security engineering experience, with scale-up exposure.
• Strong application security experience, including code reviews and remediation.
• Experience conducting or coordinating security audits and penetration tests.
• Comfortable coding and working directly with Git/GitHub.
• Practical scripting or automation skills, ideally Python or Bash.
• Previous experience within an AI company or a scale-up with 50+ employees.
• Sound understanding of security governance, risk assessment and prioritisation.
• Ability to independently identify, investigate and resolve security issues, and to take end-to-end ownership in a fast-paced environment.
• Excellent English communication skills.
• Based in Europe, with approximately 80% overlap with CET working hours.
• Comfortable with occasional evening/weekend security monitoring.
• Fully comfortable working with adult/NSFW content as part of daily responsibilities.

Responsabilidades

• Application security: review code, fix vulnerabilities, coordinate external pen tests and audits.
• Governance, risk and compliance: maintain risk register, assess exposure, support audit follow-up, prioritise fixes by risk and business impact.
• Monitoring and awareness: watch alerts and threats, run phishing simulations, and provide occasional evening and weekend cover.
• IT security and access: onboarding/offboarding, device security (MDM) and access permissions, and tightening internal controls.
• AI security: track risks to generative AI platforms and vulnerabilities in third-party AI providers.

Conocimientos

Application security

Vulnerability remediation

Security audits

Penetration testing

Scripting (Python,Bash)

AI security

Governance & risk

English communication

Git/GitHub

Herramientas

Git/GitHub

Descripción del empleo

David Kennedy Recruitment is working with a rapidly growing technology company with over 50 million users worldwide that is seeking to onboard a Security Engineer to join their R&D team.As the company's sole dedicated Security Engineer, the successful candidate will take end-to-end ownership of security operations, covering application security, vulnerability management, governance and risk, and emerging AI security challenges. The company's products include adult/NSFW content, so candidates must be fully comfortable working with this material.

Position: Security Engineer (AppSec / GRC / AI Security)Location: Europe/ASIA, RemoteEmployment type: B2B engagement preferred

DUTIES AND RESPONSIBILITIES:

• Application security: review code, find and fix vulnerabilities, work with developers in Git/GitHub, and coordinate external pen tests and audits.
• Governance, risk and compliance: build and maintain the security risk register, assess exposure across systems, support audit follow-up, and prioritise fixes by risk and business impact.
• Monitoring and awareness: watch alerts and threats, run awareness programmes and phishing simulations, and provide occasional evening and weekend cover.
• IT security and access: handle secure onboarding and offboarding, device security (MDM) and access permissions, and tighten internal controls.
• AI security: track risks to generative AI platforms (prompt injection, jailbreaks, filter bypasses) and vulnerabilities in third-party AI providers.

REQUIREMENTS:

• 2–3+ years of hands‑on security engineering experience, with flexibility for exceptional scale‑up experience
• Strong application security experience, including code reviews and vulnerability remediation
• Proven experience conducting or coordinating security audits and penetration tests
• Comfortable coding and working directly with Git/GitHub
• Practical scripting or automation skills, ideally Python or Bash
• Previous experience within an AI company or a scale‑up with 50+ employees
• Sound understanding of security governance, risk assessment and prioritisation
• Ability to independently identify, investigate and resolve security issues, and to take end-to-end ownership in a fast‑paced environment
• Excellent English communication skills
• Based in Europe, with approximately 80% overlap with CET working hours
• Comfortable with occasional evening/weekend security monitoring
• Fully comfortable working with adult/NSFW content as part of daily responsibilities

BENEFITS:

• Fully remote working from Europe
• Opportunity to own security for a fast-growing AI platform with over 50 million users
• Direct collaboration with engineering leadership
• Hands‑on, non‑advisory role with real responsibility for security outcomes
• And many more!!!