Security Engineer (AppSec / GRC / AI Security)
Free to start · No card · 5 credits the moment you sign up
Job description
David Kennedy Recruitment is working with a rapidly growing technology company with over 50 million users worldwide that is seeking to onboard a Security Engineer to join their R&D team.
As the company's sole dedicated Security Engineer, the successful candidate will take end-to-end ownership of security operations, covering application security, vulnerability management, governance and risk, and emerging AI security challenges. The company's products include adult/NSFW content, so candidates must be fully comfortable working with this material.
Position: Security Engineer (AppSec / GRC / AI Security)
Location: Europe/ASIA, Remote
Employment type: B2B engagement preferred
DUTIES AND RESPONSIBILITIES:
Application security: review code, find and fix vulnerabilities, work with developers in Git/GitHub, and coordinate external pen tests and audits.
Governance, risk and compliance: build and maintain the security risk register, assess exposure across systems, support audit follow-up, and prioritise fixes by risk and business impact.
Monitoring and awareness: watch alerts and threats, run awareness programmes and phishing simulations, and provide occasional evening and weekend cover.
IT security and access: handle secure onboarding and offboarding, device security (MDM) and access permissions, and tighten internal controls.
AI security: track risks to generative AI platforms (prompt injection, jailbreaks, filter bypasses) and vulnerabilities in third-party AI providers.
REQUIREMENTS:
2–3+ years of hands-on security engineering experience, with flexibility for exceptional scale-up experience
Strong application security experience, including code reviews and vulnerability remediation
Proven experience conducting or coordinating security audits and penetration tests
Comfortable coding and working directly with Git/GitHub
Practical scripting or automation skills, ideally Python or Bash
Previous experience within an AI company or a scale-up with 50+ employees
Sound understanding of security governance, risk assessment and prioritisation
Ability to independently identify, investigate and resolve security issues, and to take end-to-end ownership in a fast-paced environment
Excellent English communication skills
Based in Europe, with approximately 80% overlap with CET working hours
Comfortable with occasional evening/weekend security monitoring
Fully comfortable working with adult/NSFW content as part of daily responsibilities
BENEFITS:
Fully remote working from Europe
Opportunity to own security for a fast-growing AI platform with over 50 million users
Direct collaboration with engineering leadership
Hands-on, non-advisory role with real responsibility for security outcomes
And many more!!!
Originally posted on Himalayas
Prepare your application
Use the description above to assess your fit for David Kennedy Recruitment. This checklist is guidance from Resumize, rather than additional requirements from the employer. Imported listings can be shortened or change after collection, so confirm the complete description and current availability before sending an application.
Match requirements to evidence
Identify the responsibilities and skills the employer explicitly names. For each important requirement, choose one example from your work, education, training, or projects. Explain what you did, how you did it, and what changed as a result. Include a measurable outcome when you can support it. If you lack a requirement, describe related experience accurately instead of adding an unfamiliar skill to your resume.
Put the most relevant examples near the top of your resume. Keep job titles, dates, qualifications, and contact details consistent across your application materials. Use the employer’s terminology when it describes your experience accurately; a copied list of keywords does not explain your contribution. A short, specific bullet is easier to review than a paragraph that mixes several unrelated duties.
Check the working arrangement
Confirm the location, schedule, employment type, and any eligibility requirements on the employer’s site. A remote label does not establish worldwide eligibility or flexible hours. If compensation, benefits, equipment, travel, or contract duration are missing from this listing, write down your questions for the recruiter. Do not assume details from another opening at the same company apply to this role.
Review before submitting
Follow the employer’s requested file format and application instructions. Open your exported resume and check that its text is selectable, its sections read in order, and its links work. Proofread names, dates, and contact information. Share confidential work samples only when you have permission, and use an anonymized example when necessary.
Submit through a trusted employer or recruiting destination. If the original listing has disappeared, search the employer’s careers page for the title rather than assuming the vacancy remains open. Save the application date, job reference, and the version of your resume you sent. Those details help you prepare for a later conversation and avoid submitting conflicting information through several job boards.
Review your resume for writing and readability feedback, or browse other openings if this opportunity is unavailable.