David Kennedy Recruitment

Jobid: 645321508963028294 (0.0505)

David Kennedy Recruitment is working with a rapidly growing technology company with over 50 million users worldwide that is seeking to onboard a Security Engineer to join their R&D team.

As the company’s sole dedicated Security Engineer, the successful candidate will take end-to-end ownership of security operations, covering application security, vulnerability management, governance and risk, and emerging AI security challenges. The company’s products include adult/NSFW content, so candidates must be fully comfortable working with this material.

Position: Security Engineer (AppSec / GRC / AI Security)

Location: Europe/ASIA, Remote

Employment type: B2B engagement preferred

DUTIES AND RESPONSIBILITIES:

Application security (core of the role)

Review code every week to catch vulnerabilities before they ship
Find and prioritise real vulnerabilities across the stack, and drive them through to fixes

Audits and pentests

Coordinate external security audits and penetration tests
Challenge findings where needed and follow them through to fixes

Engineering and automation

Automate security work and build the tools needed to scale it
Use AI tools daily for code review, pentesting and scripting

Ownership and communication

Own security end to end with little support, deciding what matters most
Explain technical risk in plain language to the team and leadership
Cover security alerts, including occasional night and weekend on-call

Also part of the role (lighter)

Maintain a simple risk register and GRC documentation
Share security updates with the team and run awareness training
Monitor emerging AI threats (prompt injection, jailbreaks, content filter bypass) and incidents at AI providers

Advantages

AI/LLM security testing (prompt injection, jailbreaking), a strong plus
Experience at an AI company or a scale-up
GRC awareness
Familiarity with MDM and access management

REQUIREMENTS:

2+ years of hands-on security experience
Hands-on AppSec experience, not compliance only: reviews code regularly and can walk through a real vulnerability found and fixed
Experience coordinating an external audit or pentest and following the findings through to fixes
Ships code with Git/GitHub, scripts in Python or Bash, and has recent hands-on experience on a modern web stack (e.g. Rails, Node; GCP, Heroku or similar)
Has been the sole or lead security person, or owned a security area independently, with weekly code review or system testing over the last 2 years
Clear communicator of risk to non-technical colleagues
Uses AI tools every day in security work
Hacker mindset, with security as a passion as well as a job (bug bounties, CTFs, research, write-ups or personal tools)
Perfectly fluent English
Comfortable working with products built on uncensored models and NSFW content

BENEFITS:

Fully remote working from Europe
Opportunity to own security for a fast-growing AI platform with over 50 million users
Direct collaboration with engineering leadership
Hands-on, non-advisory role with real responsibility for security outcomes
And many more!!!

Lees hier meer…

Deel deze vacature: