Security Engineer (Application Security, GRC & AI)

Salve.Inno Consulting•Webster, MA

14h•Remote

About The Position

The company is hiring a hands-on Security Engineer to join its R&D team and take end-to-end ownership of security operations for an AI-powered consumer platform serving more than 50 million users worldwide. The role covers application security, vulnerability management, governance and risk assessment, internal IT security, and emerging AI-related threats. As the company's sole dedicated Security Engineer, this person will investigate vulnerabilities, review code, implement security improvements, and work directly with developers and engineering leadership. The position also coordinates external security assessments, maintains security governance processes, and strengthens the organisation's security posture. It is a highly technical, autonomous role rather than a compliance-only or advisory position.

Requirements

At least 2–3+ years of hands-on security engineering experience; exceptional candidates from fast-growing technology environments may be considered.
Strong practical application security experience, including code reviews, vulnerability identification, and remediation.
Proven experience conducting or coordinating security audits and penetration tests.
Ability to work directly with application code and development teams using Git/GitHub.
Practical scripting or automation experience, ideally with Python, Bash, or equivalent technologies.
Previous experience at an AI company or technology scale-up with at least 50 employees.
Sound understanding of security governance, risk assessment, vulnerability prioritisation, and remediation processes.
Ability to develop or maintain security risk registers and support audit-related activities.
Strong technical problem-solving skills and an investigative, security-focused mindset.
Ability to independently identify, investigate, and resolve security vulnerabilities.
Comfort taking end-to-end ownership of security operations without a large dedicated security team.
Strong collaboration skills with developers, engineering leadership, and external security providers.
Excellent written and spoken English.
Ability to work independently in a fast-paced, fully remote technology environment.
Willingness to provide occasional evening and weekend security monitoring coverage.
Willingness to work under a B2B contractor agreement.

Nice To Haves

Experience securing AI-powered applications, generative AI systems, or LLM-based products.
Previous responsibility as a sole, lead, or independently operating Security Engineer.
Experience at fast-growing AI startups or technology scale-ups.
Practical use of AI tools for security research, code review, vulnerability analysis, or workflow automation.
Personal security research, ethical hacking projects, or independent vulnerability discovery.
Experience across application security, governance, access management, and security awareness.
Familiarity with emerging AI security threats, including prompt injection and jailbreak techniques.

Responsibilities

Conduct security-focused code reviews to identify application vulnerabilities.
Investigate, prioritise, and remediate security weaknesses across applications and services.
Collaborate with developers to implement secure coding practices and vulnerability fixes.
Work within Git/GitHub development workflows to review code and contribute to security improvements.
Coordinate external penetration testing engagements and security audits.
Track identified vulnerabilities and work with engineering teams to ensure timely remediation.
Assess application security risks and recommend practical technical solutions.
Develop, maintain, and improve the organisation's security risk register.
Identify and assess security exposure across internal systems, applications, and third-party services.
Prioritise security improvements according to risk severity, operational requirements, and business impact.
Support security governance processes, documentation, and audit preparation.
Coordinate audit follow-up activities and track remediation progress.
Strengthen internal security controls and risk management procedures.
Monitor security alerts, emerging threats, and relevant vulnerabilities.
Investigate suspicious activity and coordinate appropriate responses.
Organise security awareness initiatives and phishing simulations.
Communicate security risks, best practices, and emerging threats to internal teams.
Provide occasional evening and weekend security monitoring coverage when required.
Support secure employee onboarding and offboarding procedures.
Review and manage user access permissions across internal systems.
Strengthen identity and access management controls.
Support device security management, including mobile device management (MDM).
Improve internal IT security processes and operational controls.
Monitor emerging security risks affecting generative AI applications and platforms.
Assess threats involving prompt injection, jailbreaks, and content-filter bypasses.
Track security vulnerabilities and incidents associated with third-party AI providers.
Collaborate with engineering teams to identify and mitigate AI-related security risks.
Research emerging AI security techniques, tools, and defensive approaches.

Benefits

Competitive compensation package based on experience and seniority.
Fully remote working arrangement from Europe.
Opportunity to take full ownership of security operations for a rapidly growing AI platform with over 50 million users.
Direct collaboration with engineering leadership and senior technical stakeholders.
High level of autonomy and responsibility for security decisions and outcomes.
Opportunity to work across application security, governance, vulnerability management, and emerging AI security challenges.
Exposure to large-scale consumer technology infrastructure and AI-powered products.
Hands-on technical environment focused on implementing practical security improvements.
International working environment within a rapidly growing technology organisation.
Opportunities for professional growth and development in application and AI security.