Security Engineer

Accountabilities

• Own and drive application security across the organisation, proactively identifying vulnerabilities and ensuring security risks are addressed throughout the software development lifecycle.

• Conduct regular source code reviews to detect security weaknesses before deployment, prioritising critical vulnerabilities and collaborating with engineering teams to implement effective fixes.

• Coordinate external security audits and penetration tests, critically evaluating findings, challenging assessments when necessary and ensuring remediation actions are completed.

• Develop and automate security processes, scripts and internal tools to improve vulnerability detection, streamline security operations and support scalability.

• Integrate AI-powered tools into daily security workflows, leveraging them for code reviews, penetration testing, scripting and security research.

• Act as the primary security point of contact, independently defining priorities, managing security initiatives and communicating technical risks clearly to technical and non-technical stakeholders.

• Monitor and respond to security alerts, including participating in occasional night and weekend on-call rotations.

• Maintain risk registers and relevant Governance, Risk and Compliance (GRC) documentation, ensuring security practices remain organised and up to date.

• Promote security awareness across the organisation by sharing relevant updates, providing guidance and delivering internal security training.

• Monitor emerging AI-specific security threats, including prompt injection, jailbreaks, content moderation bypasses and vulnerabilities affecting third-party AI providers.

Requirements:

• At least 2 years of hands-on professional experience in cybersecurity, with a strong focus on application security rather than compliance-only or infrastructure-focused responsibilities.

• Demonstrated experience conducting regular source code reviews and identifying, investigating and resolving real application vulnerabilities, with the ability to explain a concrete example of a vulnerability discovered and fixed.

• Experience coordinating external security audits or penetration tests and managing remediation efforts through to completion.

• Strong engineering skills, including experience working with Git/GitHub, scripting in Python or Bash, and hands-on exposure to modern web technologies such as Ruby on Rails or Node.js.

• Familiarity with cloud and hosting environments such as Google Cloud Platform (GCP), Heroku or comparable platforms.

• Proven ability to work independently and take ownership of security activities, ideally having served as a sole security specialist, security lead or independent owner of a security function.

• Recent practical experience reviewing code or testing systems regularly, ideally on a weekly basis over the past two years.

• Daily use of AI-powered tools to support security engineering, research, automation and vulnerability assessment.

• Strong analytical and problem-solving abilities, combined with a proactive hacker mindset and genuine enthusiasm for discovering vulnerabilities and making systems more secure.

• Excellent communication and collaboration skills, with full professional fluency in English and the ability to explain complex technical risks in accessible terms.

• A strong sense of ownership, accountability and commitment, with a goal-oriented approach and the ability to balance hands-on execution with planning and strategic thinking.

• Humility, adaptability and openness to feedback, with a willingness to learn and continuously improve.

• Comfort working with AI-powered products that may generate uncensored and NSFW content.

• Nice to have: Experience with AI and Large Language Model (LLM) security testing, particularly prompt injection, jailbreaking and other adversarial techniques.

• Nice to have: Previous experience working in an AI-focused company, technology scale-up or fast-growing digital product environment.

• Nice to have: Familiarity with GRC principles, Mobile Device Management (MDM) and identity or access management solutions.

• Nice to have: Personal involvement in bug bounty programmes, Capture the Flag (CTF) competitions, security research, technical write-ups or developing independent security tools.

Benefits:

• Competitive and flexible contract arrangements: B2B collaboration is preferred, although other arrangements may be considered, with an emphasis on long-term commitment and impact.

• Fully remote work: Work from anywhere and choose the environment that best supports your productivity.

• Paid time off: 20 working days of paid annual leave.

• Annual team gathering: Yearly in-person events to connect with colleagues, exchange ideas and celebrate achievements.

• Health and wellness support: Monthly allowance of $100 USD towards health insurance expenses.

• Mental health support: Unlimited individual sessions with psychologists and lifestyle experts through OpenUp, also available to up to three family members.

• Co-working allowance: Budget for up to two co-working space visits per month, with reimbursement of €35 / $40 per visit.

• Learning and development budget: Dedicated funding for professional development, including courses, books, conferences, industry events and certifications.

• Company equipment: Laptop provided, with an additional budget of up to $250 for a monitor and $150 for accessories such as a keyboard, mouse, microphone and headphones.

• Premium AI tools: Access to ChatGPT, Hugging Face, Claude Code and other AI tools required to support your work and maximise productivity.

• High-impact responsibilities: Opportunity to independently shape application security practices and contribute to the protection of large-scale AI-powered products.

• International remote environment: Collaborate with experienced professionals in a fast-moving, innovation-driven team with a strong culture of autonomy, ownership and continuous learning.