Security Engineer (AppSec / GRC / AI Security)
New
J
JobgetherAI technology
Listing location: Germany; Structured job location: Germany, Approximately 80% overlap with Central European Time (CET) working hours.Full-TimeMiddle
Salary65,000 - 85,000 EUR per year
Apply NowOpens the employer's application page
Job Details
- Languages
- Excellent English communication skills
- Experience
- At least 2–3 years of hands-on experience in security engineering, application security, or a closely related cybersecurity role
- Required Skills
- PythonBashGitGitHub
Requirements
- At least 2–3 years of hands-on experience in security engineering, application security, or a closely related cybersecurity role; candidates with exceptional scale-up experience may be considered.
- Strong application security expertise, including code reviews, vulnerability identification, security testing, and practical remediation.
- Experience conducting or coordinating security audits and penetration tests, including tracking findings through resolution.
- Comfort working directly with code, Git, and GitHub and collaborating with software engineers.
- Practical scripting or automation skills, preferably using Python or Bash.
- Previous experience at an AI-focused company or a technology scale-up with more than 50 employees.
- Understanding of security governance, risk assessment, vulnerability prioritization, and remediation planning.
- Familiarity with generative AI security risks, including prompt injection, jailbreaks, and third-party AI integrations.
- Understanding of IT security fundamentals, including identity and access management, device security, employee lifecycle controls, and internal security policies.
- Ability to work independently, own security initiatives end to end, and make decisions with limited supervision.
- Analytical and problem-solving skills to assess technical vulnerabilities and provide clear, actionable recommendations.
- Excellent English communication skills and ability to collaborate with technical stakeholders and leadership.
- Based in Europe and able to maintain approximately 80% overlap with CET working hours; willing to provide occasional evening and weekend security monitoring coverage.
- Comfort working with adult or NSFW content.
Responsibilities
- Review code, identify vulnerabilities, recommend and implement remediation, and collaborate with developers through Git and GitHub workflows.
- Coordinate external penetration tests, security assessments, and audits, and track findings through resolution.
- Build and maintain the security risk register, assess system exposure, support audit follow-ups, and prioritize remediation.
- Monitor security alerts, investigate potential threats, respond to incidents, and provide occasional evening and weekend coverage when required.
- Develop employee security awareness initiatives, conduct phishing simulations, and promote secure working practices.
- Manage secure employee onboarding and offboarding, device security and mobile device management, access permissions, and internal security controls.
- Identify and monitor generative AI vulnerabilities, including prompt injection, jailbreaks, safety-filter bypasses, and third-party provider risks.
- Identify security gaps, investigate incidents, coordinate remediation, and establish practical security processes.
- Work with engineering leadership and development teams to integrate security into development workflows and align decisions with technical requirements and business priorities.
View Full Description & ApplyYou'll be redirected to the employer's site
