Security Engineer – Application Security, GRC, AI

This is a fully remote position, open to applicants in Germany.

📋 Description

• Perform security-centric code evaluations to detect possible application vulnerabilities.

• Examine, prioritize, and address security deficiencies across applications and services.

• Collaborate closely with developers to enforce secure coding methodologies and rectify vulnerabilities.

• Engage in Git/GitHub development processes to assess code and enhance security measures.

• Oversee external penetration testing activities and security evaluations.

• Monitor identified vulnerabilities and guarantee prompt remediation in collaboration with engineering teams.

• Evaluate application security risks and propose actionable technical solutions.

• Create, uphold, and consistently enhance the organization’s security risk register.

• Recognize and evaluate security vulnerabilities within internal systems, applications, and third-party services.

• Prioritize security enhancements based on risk levels, operational needs, and business ramifications.

• Assist in security governance activities, documentation, and audit readiness.

• Manage audit follow-up tasks and track progress on remediation efforts.

• Strengthen internal security protocols and risk management strategies.

• Monitor security alerts, new threats, and pertinent vulnerabilities.

• Investigate suspicious activities and coordinate suitable responses.

• Organize initiatives for security awareness and phishing simulations.

• Communicate security threats, best practices, and emerging risks to internal teams.

• Provide occasional evening and weekend security monitoring coverage as needed.

• Assist in secure onboarding and offboarding procedures for employees.

• Review and manage user access permissions across internal systems.

• Enhance identity and access management protocols.

• Support device security management, including mobile device management (MDM).

• Identify avenues for improving internal IT security processes and operational controls.

• Monitor new security risks impacting generative AI applications and platforms.

• Assess threats related to prompt injection, jailbreaks, and content-filter bypasses.

• Track security vulnerabilities and incidents linked to third-party AI providers.

• Collaborate with engineering teams to identify and mitigate AI-related security threats.

• Investigate new AI security techniques, tools, and defensive strategies.

⛳️ Requirements

• A minimum of 2-3+ years of hands-on experience in security engineering, with flexibility for exceptional candidates from rapidly growing tech environments.

• Strong practical experience in application security, including code reviews, vulnerability detection, and remediation.

• Proven ability to conduct or coordinate security audits and penetration tests.

• Capability to work directly with application code and development teams using Git/GitHub.

• Practical experience in scripting or automation, ideally with Python, Bash, or similar technologies.

• Previous experience in an AI company or a tech scale-up with a minimum of 50 employees.

• Comprehensive understanding of security governance, risk assessment, vulnerability prioritization, and remediation processes.

• Ability to develop or maintain security risk registers and assist in audit-related tasks.

• Strong technical problem-solving abilities and a security-focused investigative mindset.

• Skilled at independently identifying, investigating, and resolving security vulnerabilities.

• Comfortable taking complete ownership of security operations without reliance on a large dedicated security team.

• Excellent collaboration skills when working with developers, engineering leadership, and external security providers.

• Proficient in written and spoken English.

• Ability to work autonomously in a fast-paced, fully remote technology setting.

• Willingness to provide occasional evening and weekend security monitoring coverage.

• Ready to work under a B2B contractor agreement.

• Experience securing AI-powered applications, generative AI systems, or LLM-based products is preferred.

• Previous experience as a sole, lead, or independently operating Security Engineer is preferred.

• Experience within fast-growing AI startups or technology scale-ups is preferred.

• Practical use of AI tools for security research, code review, vulnerability analysis, or workflow automation is preferred.

• Engagement in personal security research, ethical hacking projects, or independent vulnerability discovery is preferred.

• Experience across application security, governance, access management, and security awareness is preferred.

• Familiarity with emerging AI security threats, including prompt injection and jailbreak techniques is preferred.

🏝️ Benefits

• Competitive compensation package reflecting experience and seniority.

• Fully remote working arrangement available in Europe.

• B2B contractor engagement.

• Opportunity to take full ownership of security operations for a rapidly growing AI platform with over 50 million users.

• Direct collaboration with engineering leadership and senior technical stakeholders.

• High level of autonomy and responsibility for security decisions and outcomes.

• Opportunity to work across application security, governance, vulnerability management, and emerging AI security challenges.

• Exposure to large-scale consumer technology infrastructure and AI-powered products.

• Hands-on technical environment focused on implementing practical security improvements.

• International working environment within a rapidly growing technology organization.

• Opportunities for professional growth and development in application and AI security.