AI Security Engineer; f​/m​/d) arbeitnow Clariness

Clariness is looking for an AI Security Engineer (f/m/d) based Germany, UK, SA, or Serbia.
- Full-time; unlimited -

This role is about building, operating and continuously improving Clariness' security capabilities across applications, cloud infrastructure and AI systems. As our founding-level security hire, you will establish the security engineering function, define its priorities and work directly with engineering teams to embed effective security controls throughout our technology environment.

• Defining Clariness' security engineering strategy and roadmap, and building and operating the security function across application security, cloud security, AI and LLM security, vulnerability management and supporting security tooling.
• Working directly with engineering teams on secure system design, threat modelling, penetration testing and vulnerability remediation, while embedding appropriate security controls into development processes and CI/CD pipelines.
• Owning AI security and governance across LLM-powered features, RAG systems and agentic pipelines, including assessing and mitigating risks covered by the OWASP Top 10 for LLM Applications.
• Designing and validating safeguards for AI agents, including sandboxing, privilege and access controls, secure tool use and adversarial red teaming of AI systems.
• Evaluating, deploying and continuously improving AI-powered security automation, including autonomous vulnerability triage, LLM-powered alert analysis, compliance evidence gathering and AI-assisted threat intelligence.
• Assessing commercial and open-source security tools based on effectiveness, operational fit and cost, and developing custom solutions where existing tooling does not meet Clariness' requirements.
• Managing Clariness' IT security compliance programme—including SOC 2 Type II, applicable EU AI Act high-risk obligations, GDPR Article 32 technical measures and GxP IT security controls—while maintaining audit-ready documentation and acting as the primary security liaison for external auditors, regulators, Legal and Compliance.

• At least five years of hands-on experience in security engineering, application security or information security, with strong technical depth beyond advisory or governance responsibilities.
• Proven experience building or significantly developing a security programme within a product engineering environment, ideally as an early or founding security hire.
• Strong practical experience across application security, cloud security, secure software development, threat modelling, penetration testing, vulnerability management and security controls within CI/CD pipelines.
• Experience assessing, testing or implementing security controls for LLM-powered applications, RAG systems or agentic pipelines.
• Hands-on experience with AI agents, either building them for security automation or securing them through adversarial testing, sandboxing and privilege controls.
• Demonstrable compliance experience involving at least one SOC 2 audit cycle, GDPR programme ownership or implementation of EU AI Act requirements, including the ability to produce audit-ready documentation and work with external auditors.
• Experience in a regulated industry such as clinical research, pharmaceuticals, healthtech or fintech, with knowledge of GxP or comparable regulated data-handling requirements considered a strong advantage, alongside strong English communication skills at C1 level.

• A varied and exciting job with a lot of personal responsibility in an international company, where you can develop and expand…