AI Security Engineer; gn - remote

Description

At Vercore, we are fundamentally committed across all our business units to driving better data-based decision‑making. Our vision is to empower every industrial process worldwide with data‑driven intelligence that drives operational excellence, sustainable growth, and value for all.

Our mission is to transform industrial analytics into accessible intelligence that empowers people and enterprises to excel by embedding ourselves at the heart of industrial operations, gathering and analyzing data across entire processes from real‑time operations to strategic planning, and delivering insights that drive efficiency, reduce cost, and secure competitive advantage across the entire value chain.

We are currently seeking a Junior AI Security Engineer (GN) to join the Compliance and Cybersecurity team. The role operationalizes security controls across the organization, helps achieve compliance objectives (ISO
27001, NIS2, CRA, and others), and enables the secure and rapid deployment of AI solutions. This role bridges the operational gap between innovation and security.

The position is available immediately on a full‑time basis in a hybrid working model either at our headquarters in Fulda or remote within Germany.

• The opportunity to explore the limits of your ambition and competence within a growing company
• A high degree of creative decision‑making freedom and plenty of room for innovative work
• Autonomy, no micromanagement
• English‑first organization
• Short communication channels and well‑accessible team leaders
• Work‑life balance with flexitime and home‑office days
• 1on1s focused on helping you grow
• Intensive onboarding and targeted individual training and development opportunities
• For onsite work: a modern and open working environment with lounges, kicker‑table, pool billiard table and team events, free soft drinks, coffee, cereals, and fresh fruit
• Childcare allowance, benefits card, and award‑winning corporate health management

• You execute well‑defined, scoped security tasks under guidance—triaging alerts, running vulnerability scans, applying documented remediations, and assisting with security/configuration reviews—respecting company standards, policies, and guidelines and with support from team members.
• You are an active member of the Compliance and Cybersecurity group, contributing ideas and recommendations for smooth day‑to‑day operations.
• You build core productivity skills: SIEM and ticketing tools, following established playbooks/runbooks, secure use of source control, and basic scripting for repeatable tasks.
• You complete the assigned security tasks on time:
  • Alert triage, scans, remediation tickets to defined quality standards; accurate and complete documentation of findings and actions taken.
  • Active participation in finding/configuration reviews; ceremony and meeting participation.
  • Support programs that enable optimal and effective AI adoption across all business functions.
  • Security assessments, identify risks, including new AI tools and models, and propose mitigation actions.
  • (with guidance) Design, implementation, and maintenance of security controls across the full AI/ML lifecycle, from tool request through deployment to production monitoring.
  • Documentation of risk mitigations and maintenance of the AI approved‑tool inventory.
• You support security in Dev Sec Ops  workflows and help define automated security gates in CI/CD pipelines (SAST, secret scanning, dependency and license checks).

• You hold a degree in computer science, cyber security, or a related field.
• You have working knowledge of networking, operating systems and common attack techniques (e.g. OWASP Top 10).
• Familiarity with core security tooling (SIEM, vulnerability scanners, EDR), core security concepts (CIA triad, least privilege, defense in depth), and awareness of a common framework (e.g. NIST CSF, MITRE ATT&CK).
• You have strong knowledge of data security principles, including encryption, network security, authentication, and authorization.
• You are familiar with security frameworks such as ISO
  27001, SOC, and NIST, as well as regulatory requirements like NIS2, GDPR, and the AI Act.
• You have knowledge of, or…