Security Engineer (Application Security, GRC & AI)

Salve.Inno Consulting

Contract type

Freelance

Work mode

Remote · Europe

Experience

Mid-level · 2+ years

Job description

Hands-on Security Engineer to take end-to-end ownership of security operations at an international technology company serving over 50 million users, covering application security, vulnerability management, governance, risk assessment, internal IT security and AI-related threats. The role is the company's sole dedicated Security Engineer, working autonomously with developers and engineering leadership.

At a glance

Employment: Independent contractor
Work mode: Remote · Europe
Languages: English – fluent

What you'll do

Conduct security-focused code reviews to identify potential application vulnerabilities.
Investigate, prioritise and remediate security weaknesses across applications and services.
Collaborate directly with developers to implement secure coding practices and vulnerability fixes.
Work within Git/GitHub development workflows to review code and contribute to security improvements.
Coordinate external penetration testing engagements and security audits.
Track identified vulnerabilities and ensure timely remediation in collaboration with engineering teams.
Assess application security risks and recommend practical technical solutions.
Develop, maintain and continuously improve the organisation's security risk register.
Identify and assess security exposure across internal systems, applications and third-party services.
Prioritise security improvements based on risk severity, operational requirements and business impact.
Support security governance processes, documentation and audit preparation.
Coordinate audit follow-up activities and track remediation progress.
Strengthen internal security controls and risk management procedures.
Monitor security alerts, emerging threats and relevant vulnerabilities.
Investigate suspicious activity and coordinate appropriate responses.
Organise security awareness initiatives and phishing simulations.
Communicate security risks, best practices and emerging threats to internal teams.
Support secure employee onboarding and offboarding procedures.
Review and manage user access permissions across internal systems.
Strengthen identity and access management controls.
Support device security management, including mobile device management (MDM).
Identify opportunities to improve internal IT security processes and operational controls.
Monitor emerging security risks affecting generative AI applications and platforms.
Assess potential threats involving prompt injection, jailbreaks and content-filter bypasses.

What we're looking for

Minimum 2-3+ years of hands-on security engineering experience, with flexibility for exceptional candidates from fast-growing technology environments.
Strong practical experience in application security, including code reviews, vulnerability identification and remediation.
Proven experience conducting or coordinating security audits and penetration tests.
Ability to work directly with application code and development teams using Git/GitHub.
Practical scripting or automation experience, ideally using Python, Bash or equivalent technologies.
Previous experience within an AI company or a technology scale-up with at least 50 employees.
Sound understanding of security governance, risk assessment, vulnerability prioritisation and remediation processes.
Ability to develop or maintain security risk registers and support audit-related activities.
Strong technical problem-solving skills and an investigative, security-focused mindset.
Ability to independently identify, investigate and resolve security vulnerabilities.
Comfortable taking end-to-end ownership of security operations without relying on a large dedicated security team.
Strong collaboration skills when working with developers, engineering leadership and external security providers.
Excellent written and spoken English.
Ability to operate independently in a fast-paced, fully remote technology environment.
Willingness to provide occasional evening and weekend security monitoring coverage.
Willingness to work under a B2B contractor agreement.

Nice to have

Experience securing AI-powered applications, generative AI systems or LLM-based products.
Previous responsibility as a sole, lead or independently operating Security Engineer.
Experience within fast-growing AI startups or technology scale-ups.
Practical use of AI tools for security research, code review, vulnerability analysis or workflow automation.
Personal security research, ethical hacking projects or independent vulnerability discovery.
Experience working across application security, governance, access management and security awareness.
Familiarity with emerging AI security threats, including prompt injection and jailbreak techniques.

Save