Security Engineer

We are looking for a hands-on Security Engineer to join a fast-growing AI technology company and take ownership across a broad security function.

This is not a compliance-only or single-specialty role. You’ll work across Application Security, GRC, vulnerability management, security awareness, IT/access management and emerging AI security threats, working closely with engineering and reporting directly to the Security Lead.

We’re looking for someone technically curious and comfortable operating with autonomy, someone who can review code, investigate vulnerabilities, challenge findings and drive security improvements from start to finish.

What You’ll Do

• Perform security-focused code reviews and identify vulnerabilities before they reach production.
• Track, prioritize and drive vulnerability remediation across the stack.
• Coordinate external penetration tests, security audits and remediation.
• Maintain and evolve the company’s risk register and security documentation.
• Work with external security vendors and critically assess their findings.
• Run security awareness initiatives, phishing simulations and internal security communications.
• Support MDM, access provisioning/deprovisioning and employee device security.
• Monitor security alerts and support occasional agreed night/weekend on-call coverage.

• Min. 3+ years of hands-on cybersecurity experience, with flexibility for strong start-up/scale-up experience.
• Strong Application Security knowledge, including code review and vulnerability management.
• Experience with penetration testing and/or external security audits.
• Comfortable working with Git/GitHub and within engineering workflows.
• Scripting/automation skills using Python, Bash or similar.
• Understanding of GRC and security risk management.
• Strong English communication skills and the confidence to operate independently.
• A genuine security/hacker mindset, someone who enjoys researching vulnerabilities, experimenting, breaking things and building solutions rather than simply following established processes.Experience within an AI company or fast-growing technology scale-up is highly desirable. Exposure to AI/LLM security is a bonus, but curiosity and willingness to learn matter more than proven experience.