Security Engineer, Application Security, GRC, AI

This is a fully remote position, open to applicants in Spain.

📋 Description

• Perform code reviews with a focus on security to detect application vulnerabilities.

• Examine, prioritize, and address security weaknesses across various applications and services.

• Partner with developers to enforce secure coding methodologies and resolve vulnerabilities.

• Engage in Git/GitHub workflows to assess code and contribute to enhancing security measures.

• Manage external penetration testing initiatives and security audits.

• Monitor vulnerabilities and ensure prompt remediation in collaboration with engineering teams.

• Evaluate application security risks and propose effective technical solutions.

• Create, sustain, and refine the organization’s security risk register.

• Identify and evaluate security exposures across internal systems, applications, and third-party services.

• Prioritize security enhancements based on the severity of risks, operational needs, and business implications.

• Assist in security governance, documentation, and preparation for audits.

• Oversee follow-up activities related to audits and monitor remediation progress.

• Enhance internal security controls and risk management protocols.

• Keep track of security alerts, emerging threats, and pertinent vulnerabilities.

• Investigate suspicious activities and coordinate appropriate responses.

• Organize initiatives for security awareness and conduct phishing simulations.

• Communicate security risks, best practices, and emerging threats to internal teams.

• Provide occasional evening and weekend coverage for security monitoring when necessary.

• Assist in secure onboarding and offboarding processes for employees.

• Assess and manage user access permissions across internal systems.

• Fortify identity and access management controls.

• Support device security management, including mobile device management (MDM).

• Enhance internal IT security protocols and operational controls.

• Monitor emerging security threats affecting generative AI applications and platforms.

• Assess threats related to prompt injection, jailbreaks, and content-filter bypasses.

• Track vulnerabilities and incidents involving third-party AI providers.

• Collaborate with engineering teams to identify and mitigate AI-related security risks.

• Investigate and implement emerging AI security techniques, tools, and defensive strategies.

⛳️ Requirements

• A minimum of 2-3+ years of practical experience in security engineering.

• Significant hands-on experience in application security, including code reviews, vulnerability detection, and remediation.

• Demonstrated experience in conducting or coordinating security audits and penetration tests.

• Capability to work directly with application code and development teams using Git/GitHub.

• Practical experience in scripting or automation, preferably with Python, Bash, or similar technologies.

• Prior experience in an AI company or a tech scale-up with a minimum of 50 employees.

• Comprehensive understanding of security governance, risk assessment, vulnerability prioritization, and remediation processes.

• Ability to develop or maintain security risk registers and assist with audit-related tasks.

• Strong technical problem-solving and investigative skills in security.

• Ability to autonomously identify, investigate, and resolve security vulnerabilities.

• Comfortable taking full ownership of security operations without relying on a large dedicated security team.

• Excellent collaboration skills with developers, engineering leadership, and external security partners.

• Exceptional proficiency in written and spoken English.

• Capability to work independently in a fast-paced, fully remote technology environment.

• Willingness to provide occasional evening and weekend security monitoring coverage.

• Willingness to engage under a B2B contractor agreement.

🏝️ Benefits

• Competitive compensation package commensurate with experience and seniority.

• Fully remote work arrangement available from Europe.

• Engagement through B2B contractor agreement.

• Opportunity to take complete ownership of security operations for a rapidly expanding AI platform serving over 50 million users.

• Direct collaboration with engineering leadership and senior technical stakeholders.

• High degree of autonomy and accountability for security decisions and outcomes.

• Chance to engage in application security, governance, vulnerability management, and emerging AI security challenges.

• Exposure to large-scale consumer technology infrastructure and AI-driven products.

• Hands-on technical environment focused on implementing practical security enhancements.

• International working atmosphere within a swiftly growing technology organization.

• Opportunities for professional advancement and development in application and AI security.