Security Engineer; Application Security, GRC & AI

We are looking for a hands-on Security Engineer - Application Security, GRC & AI to join the R&D team of a rapidly growing international technology company serving more than 50 million users worldwide. As the company's sole dedicated Security Engineer
, you will take end-to-end ownership of security operations, covering application security, vulnerability management, governance, risk assessment, internal IT security and emerging AI-related threats.

This is a highly technical and autonomous position requiring someone who can personally investigate vulnerabilities, review code, implement security improvements and collaborate directly with developers and engineering leadership. You will play a central role in protecting a large-scale AI-powered consumer platform, coordinating external security assessments, maintaining security governance processes and strengthening the organisation's overall security posture.

The ideal candidate combines strong application security expertise with practical coding skills, sound risk management judgment and the ability to independently identify and resolve security challenges. This is not a compliance-only or purely advisory role
. We are looking for a proactive, technically capable Security Engineer who enjoys hands-on problem-solving and takes direct responsibility for security outcomes.

• Conduct security-focused code reviews to identify potential application vulnerabilities.

• Investigate, prioritise and remediate security weaknesses across applications and services.

• Collaborate directly with developers to implement secure coding practices and vulnerability fixes.

• Work within Git/Git Hub development workflows to review code and contribute to security improvements.

• Coordinate external penetration testing engagements and security audits.

• Track identified vulnerabilities and ensure timely remediation in collaboration with engineering teams.

• Assess application security risks and recommend practical technical solutions.

• Develop, maintain and continuously improve the organisation's security risk register.

• Identify and assess security exposure across internal systems, applications and third-party services.

• Prioritise security improvements based on risk severity, operational requirements and business impact.

• Support security governance processes, documentation and audit preparation.

• Coordinate audit follow-up activities and track remediation progress.

• Strengthen internal security controls and risk management procedures.

• Monitor security alerts, emerging threats and relevant vulnerabilities.

• Investigate suspicious activity and coordinate appropriate responses.

• Organise security awareness initiatives and phishing simulations.

• Communicate security risks, best practices and emerging threats to internal teams.

• Provide occasional evening and weekend security monitoring coverage when required.

• Support secure employee onboarding and offboarding procedures.

• Review and manage user access permissions across internal systems.

• Strengthen identity and access management controls.

• Support device security management, including mobile device management (MDM).

• Identify opportunities to improve internal IT security processes and operational controls.

• Monitor emerging security risks affecting generative AI applications and platforms.

• Assess potential threats involving prompt injection, jailbreaks and content-filter bypasses.

• Track security vulnerabilities and incidents associated with third-party AI providers.

• Collaborate with engineering teams to identify and mitigate AI-related security risks.

• Research emerging AI security techniques, tools and defensive approaches.

• Minimum 2-3+ years of hands-on security engineering experience, with flexibility for exceptional…