Security Engineer (AppSec / GRC / AI Security)

David Kennedy Recruitment is collaborating with a rapidly growing technology company with over 50 million users worldwide to hire a Security Engineer for their R&D team. The company operates products including adult/NSFW content and focuses on application security, vulnerability management, governance and risk, and AI security.

• 2–3+ years of hands-on security engineering experience with flexibility for exceptional scale-up experience
• Strong application security experience including code reviews and vulnerability remediation
• Experience conducting or coordinating security audits and penetration tests
• Comfortable coding and working directly with Git/GitHub
• Practical scripting or automation skills, ideally in Python or Bash
• Previous experience within an AI company or a scale-up with 50+ employees
• Sound understanding of security governance, risk assessment, and prioritisation
• Ability to independently identify, investigate, and resolve security issues with end-to-end ownership
• Excellent English communication skills
• Based in Europe with approximately 80% overlap with CET working hours
• Comfortable with occasional evening/weekend security monitoring
• Fully comfortable working with adult/NSFW content as part of daily responsibilities

Application security:

• Review code, find and fix vulnerabilities
• Work with developers in Git/GitHub
• Coordinate external penetration tests and audits

Governance, risk and compliance:

• Build and maintain the security risk register
• Assess exposure across systems
• Support audit follow-up
• Prioritise fixes by risk and business impact

Monitoring and awareness:

• Watch alerts and threats
• Run awareness programmes and phishing simulations
• Provide occasional evening and weekend cover

IT security and access:

• Handle secure onboarding and offboarding
• Manage device security (MDM) and access permissions
• Tighten internal controls

AI security:

• Track risks to generative AI platforms including prompt injection, jailbreaks, and filter bypasses
• Monitor vulnerabilities in third-party AI providers

Candidates must be based in Europe with approximately 80% overlap with CET working hours. The role requires comfort with working with adult/NSFW content. Occasional evening and weekend work for security monitoring is expected.