Security Engineer (AppSec / GRC / AI Security)

David Kennedy Recruitment is working with a rapidly growing technology company with over 50 million users worldwide that is seeking to onboard a Security Engineer to join their R&D team. As the company's sole dedicated Security Engineer, the successful candidate will take end-to-end ownership of security operations, covering application security, vulnerability management, governance and risk, and emerging AI security challenges. The company's products include adult/NSFW content, so candidates must be fully comfortable working with this material.

Responsibilities

• Security Engineer (AppSec / GRC / AI Security) Location: Europe/ASIA, Remote Employment type: B2B engagement preferred DUTIES AND RESPONSIBILITIES: Application security (core of the role)
• Review code every week to catch vulnerabilities before they ship
• Find and prioritise real vulnerabilities across the stack, and drive them through to fixes
• Audits and pentests
• Coordinate external security audits and penetration tests
• Challenge findings where needed and follow them through to fixes
• Engineering and automation
• Automate security work and build the tools needed to scale it Use AI tools daily for code review, pentesting and scripting

Ownership and communication

• Own security end to end with little support, deciding what matters most Explain technical risk in plain language to the team and leadership
• Cover security alerts, including occasional night and weekend on-call
• Also part of the role (lighter) Maintain a simple risk register and GRC documentation
• Share security updates with the team and run awareness training
• Monitor emerging AI threats (prompt injection, jailbreaks, content filter bypass) and incidents at AI providers
• Experience coordinating an external audit or pentest and following the findings through to fixes

Clear communicator of risk to non-technical colleagues

• Hacker mindset, with security as a passion as well as a job (bug bounties, CTFs, research, write-ups or personal tools)
• Perfectly fluent English Comfortable working with products built on uncensored models and NSFW content BENEFITS: Fully remote working from Europe Opportunity to own security for a fast-growing AI platform with over 50 million users
• Direct collaboration with engineering leadership Hands-on, non-advisory role with real responsibility for security outcomes
• And many more!!!

Requirements

• Experience at an AI company or a scale-up GRC awareness
• Familiarity with MDM and access management REQUIREMENTS: 2+ years of hands-on security experience Hands-on AppSec experience, not compliance only: reviews code regularly and can walk through a real vulnerability found and fixed
• Has been the sole or lead security person, or owned a security area independently, with weekly code review or system testing over the last 2 years

Preferred

• Advantages AI/LLM security testing (prompt injection, jailbreaking), a strong plus
• Ships code with Git/GitHub, scripts in Python or Bash, and has recent hands-on experience on a modern web stack (e.g. Rails, Node; GCP, Heroku or similar)

Uses AI tools every day in security work