Security Engineer (AppSec / GRC / AI Security)

Accountabilities

• Application security: Review code, identify vulnerabilities, recommend and implement remediation measures, and collaborate directly with developers through Git and GitHub workflows.
• Security testing: Coordinate external penetration tests, security assessments, and audits, ensuring findings are documented, prioritized, and resolved effectively.
• Governance, risk, and compliance: Build and maintain the security risk register, assess exposure across systems, support audit follow-ups, and prioritize remediation based on risk severity and business impact.
• Security monitoring and threat management: Monitor security alerts, investigate potential threats, respond to emerging incidents, and provide occasional evening and weekend coverage when required.
• Security awareness: Develop and maintain employee security awareness initiatives, conduct phishing simulations, and promote secure working practices across the organization.
• IT security and access management: Manage secure employee onboarding and offboarding, device security and mobile device management (MDM), access permissions, and internal security controls.
• AI security: Identify and monitor vulnerabilities affecting generative AI platforms, including prompt injection, jailbreaks, safety-filter bypasses, and risks associated with third-party AI providers.
• Security operations ownership: Independently identify security gaps, investigate incidents, coordinate remediation, and establish practical security processes that evolve alongside the platform.
• Cross-functional collaboration: Work closely with engineering leadership and development teams to integrate security into development workflows and ensure security decisions align with technical requirements and business priorities.
• Continuous improvement: Stay informed about emerging cybersecurity threats, AI security developments, and industry best practices to strengthen the platform's overall security posture.

Requirements

• At least 2–3 years of hands-on experience in security engineering, application security, or a closely related cybersecurity role, with flexibility for candidates who demonstrate exceptional experience in a scale-up environment.
• Strong application security expertise, including code reviews, vulnerability identification, security testing, and practical remediation.
• Proven experience conducting or coordinating security audits and penetration tests, including tracking findings through to resolution.
• Comfortable working directly with code, Git, and GitHub, with the ability to collaborate effectively with software engineers.
• Practical scripting or automation skills, preferably using Python or Bash, to improve security workflows and operational efficiency.
• Previous experience working in an AI-focused company or a technology scale-up with more than 50 employees.
• Solid understanding of security governance, risk assessment, vulnerability prioritization, and remediation planning.
• Familiarity with AI security risks, particularly those associated with generative AI systems, prompt injection, jailbreaks, and third-party AI integrations.
• Strong understanding of IT security fundamentals, including identity and access management, device security, employee lifecycle controls, and internal security policies.
• Ability to work independently, take end-to-end ownership of security initiatives, and make sound decisions in a fast-moving environment with limited supervision.
• Strong analytical and problem-solving skills, with the ability to assess technical vulnerabilities and translate them into clear, actionable recommendations.
• Excellent English communication skills and the ability to collaborate effectively with technical stakeholders and leadership.
• Based in Europe and able to maintain approximately 80% overlap with Central European Time (CET) working hours.
• Willingness to provide occasional evening and weekend security monitoring coverage when necessary.
• Full comfort working with adult or NSFW content, as this material forms part of the platform's products and day-to-day responsibilities.

Benefits

• Fully remote work: Work remotely from India.
• Significant ownership: Take responsibility for the security function of a rapidly growing AI-powered platform serving more than 50 million users.
• Direct access to leadership: Collaborate closely with engineering leadership and influence technical priorities and security decisions.
• Hands-on impact: Work in a practical, execution-focused role where you can implement solutions and directly improve security outcomes rather than providing advisory recommendations alone.
• Broad technical scope: Gain exposure to application security, governance and risk management, security operations, and emerging AI security challenges.
• High-autonomy environment: Shape security processes, establish priorities, and build scalable practices as the organization continues to grow.
• Flexible engagement structure: B2B contracting is preferred, offering a potential arrangement suited to experienced professionals working remotely.