Security Engineer
pbThis position is listed on behalf of a partner company, who manages all applications and next steps. Our partner is looking for a Security Engineer based in Italy. /b /p pAs a Security Engineer, you will take ownership of application security for a rapidly growing AI-powered digital platform serving millions of users worldwide. This is a hands-on role focused on identifying vulnerabilities, reviewing code and strengthening security across the entire application stack. Acting as the primary security specialist, you will work closely with technical leadership and engineering teams to define security priorities and implement effective solutions. You will also contribute to securing AI-powered products by identifying emerging threats such as prompt injection, jailbreaks and content filter bypasses. Combining technical execution, independent decision-making and strategic responsibility, you will have the opportunity to shape security practices from the ground up. This fully remote position offers significant autonomy within a fast-paced, innovative and internationally distributed environment. /p h3Accountabilities /h3 ul lipOwn and drive application security across the organisation, proactively identifying vulnerabilities and ensuring security risks are addressed throughout the software development lifecycle. /p /li lipConduct regular source code reviews to detect security weaknesses before deployment, prioritising critical vulnerabilities and collaborating with engineering teams to implement effective fixes. /p /li lipCoordinate external security audits and penetration tests, critically evaluating findings, challenging assessments when necessary and ensuring remediation actions are completed. /p /li lipDevelop and automate security processes, scripts and internal tools to improve vulnerability detection, streamline security operations and support scalability. /p /li lipIntegrate AI-powered tools into daily security workflows, leveraging them for code reviews, penetration testing, scripting and security research. /p /li lipAct as the primary security point of contact, independently defining priorities, managing security initiatives and communicating technical risks clearly to technical and non-technical stakeholders. /p /li lipMonitor and respond to security alerts, including participating in occasional night and weekend on-call rotations. /p /li lipMaintain risk registers and relevant Governance, Risk and Compliance (GRC) documentation, ensuring security practices remain organised and up to date. /p /li lipPromote security awareness across the organisation by sharing relevant updates,
providing guidance and delivering internal security training. /p /li lipMonitor emerging AI-specific security threats, including prompt injection, jailbreaks, content moderation bypasses and vulnerabilities affecting third-party AI providers. /p /li /ul h3Requirements: /h3 ul lipAt least 2 years of hands-on professional experience in cybersecurity, with a strong focus on application security rather than compliance-only or infrastructure-focused responsibilities. /p /li lipDemonstrated experience conducting regular source code reviews and identifying, investigating and resolving real application vulnerabilities, with the ability to explain a concrete example of a vulnerability discovered and fixed. /p /li lipExperience coordinating external security audits or penetration tests and managing remediation efforts through to completion. /p /li lipStrong engineering skills, including experience working with Git/GitHub, scripting in Python or Bash, and hands-on exposure to modern web technologies such as Ruby on Rails or Node.js. /p /li lipFamiliarity with cloud and hosting environments such as Google Cloud Platform (GCP), Heroku or comparable platforms. /p /li lipProven ability to work independently and take ownership of security activities, ideally having served as a sole security specialist, security lead or independent owner of a security function. /p /li lipRecent practical experience reviewing code or testing systems regularly, ideally on a weekly basis over the past two years. /p /li lipDaily use of AI-powered tools to support security engineering, research, automation and vulnerability assessment. /p /li lipStrong analytical and problem-solving abilities, combined with a proactive hacker mindset and genuine enthusiasm for discovering vulnerabilities and making systems more secure. /p /li lipExcellent communication and collaboration skills, with full professional fluency in English and the ability to explain complex technical risks in accessible terms. /p /li lipA strong sense of ownership, accountability and commitment, with a goal-oriented approach and the ability to balance hands-on execution with planning and strategic thinking. /p /li lipHumility, adaptability and openness to feedback,
with a willingness to learn and continuously improve. /p /li lipComfort working with AI-powered products that may generate uncensored and NSFW content. /p /li lipNice to have: Experience with AI and Large Language Model (LLM) security testing, particularly prompt injection, jailbreaking and other adversarial techniques. /p /li lipNice to have: Previous experience working in an AI-focused company, technology scale-up or fast-growing digital product environment. /p /li lipNice to have: Familiarity with GRC principles, Mobile Device Management (MDM) and identity or access management solutions. /p /li lipNice to have: Personal involvement in bug bounty programmes, Capture the Flag (CTF) competitions, security research, technical write-ups or developing independent security tools. /p /li /ul h3Benefits: /h3 ul lipCompetitive and flexible contract arrangements: B2B collaboration is preferred, otherwise other arrangements may be considered, with an emphasis on long-term commitment and impact. /p /li lipFully remote work: Work from anywhere and choose the environment that best supports your productivity. /p /li lipPaid time off: 20 working days of paid annual leave. /p /li lipAnnual team gathering: Yearly in-person events to connect with colleagues, exchange ideas and celebrate achievements. /p /li lipHealth and wellness support: Monthly allowance of $100 USD towards health insurance expenses. /p /li lipMental health support: Unlimited individual sessions with psychologists and lifestyle experts through OpenUp, also available to up to three family members. /p /li lipCo-working allowance: Budget for up to two co-working space visits per month, with reimbursement of €35 / $40 per visit. /p /li lipLearning and development budget: Dedicated funding for professional development, including courses, books, conferences, industry events and certifications. /p /li lipCompany equipment: Laptop provided, with an additional budget of up to $250 for a monitor and $150 for accessories such as a keyboard, mouse, microphone and headphones. /p /li lipPremium AI tools: Access to ChatGPT, Hugging Face, Claude Code and other AI tools required to support your work and maximise productivity. /p /li lipHigh-impact responsibilities: Opportunity to independently shape application security practices and contribute to the protection of large-scale AI-powered products. /p /li lipInternational remote environment: Collaborate with experienced professionals in a fast-moving, innovation-driven team with a strong culture of autonomy, ownership and continuous learning. /p /li /ul #J-18808-Ljbffr
providing guidance and delivering internal security training. /p /li lipMonitor emerging AI-specific security threats, including prompt injection, jailbreaks, content moderation bypasses and vulnerabilities affecting third-party AI providers. /p /li /ul h3Requirements: /h3 ul lipAt least 2 years of hands-on professional experience in cybersecurity, with a strong focus on application security rather than compliance-only or infrastructure-focused responsibilities. /p /li lipDemonstrated experience conducting regular source code reviews and identifying, investigating and resolving real application vulnerabilities, with the ability to explain a concrete example of a vulnerability discovered and fixed. /p /li lipExperience coordinating external security audits or penetration tests and managing remediation efforts through to completion. /p /li lipStrong engineering skills, including experience working with Git/GitHub, scripting in Python or Bash, and hands-on exposure to modern web technologies such as Ruby on Rails or Node.js. /p /li lipFamiliarity with cloud and hosting environments such as Google Cloud Platform (GCP), Heroku or comparable platforms. /p /li lipProven ability to work independently and take ownership of security activities, ideally having served as a sole security specialist, security lead or independent owner of a security function. /p /li lipRecent practical experience reviewing code or testing systems regularly, ideally on a weekly basis over the past two years. /p /li lipDaily use of AI-powered tools to support security engineering, research, automation and vulnerability assessment. /p /li lipStrong analytical and problem-solving abilities, combined with a proactive hacker mindset and genuine enthusiasm for discovering vulnerabilities and making systems more secure. /p /li lipExcellent communication and collaboration skills, with full professional fluency in English and the ability to explain complex technical risks in accessible terms. /p /li lipA strong sense of ownership, accountability and commitment, with a goal-oriented approach and the ability to balance hands-on execution with planning and strategic thinking. /p /li lipHumility, adaptability and openness to feedback,
with a willingness to learn and continuously improve. /p /li lipComfort working with AI-powered products that may generate uncensored and NSFW content. /p /li lipNice to have: Experience with AI and Large Language Model (LLM) security testing, particularly prompt injection, jailbreaking and other adversarial techniques. /p /li lipNice to have: Previous experience working in an AI-focused company, technology scale-up or fast-growing digital product environment. /p /li lipNice to have: Familiarity with GRC principles, Mobile Device Management (MDM) and identity or access management solutions. /p /li lipNice to have: Personal involvement in bug bounty programmes, Capture the Flag (CTF) competitions, security research, technical write-ups or developing independent security tools. /p /li /ul h3Benefits: /h3 ul lipCompetitive and flexible contract arrangements: B2B collaboration is preferred, otherwise other arrangements may be considered, with an emphasis on long-term commitment and impact. /p /li lipFully remote work: Work from anywhere and choose the environment that best supports your productivity. /p /li lipPaid time off: 20 working days of paid annual leave. /p /li lipAnnual team gathering: Yearly in-person events to connect with colleagues, exchange ideas and celebrate achievements. /p /li lipHealth and wellness support: Monthly allowance of $100 USD towards health insurance expenses. /p /li lipMental health support: Unlimited individual sessions with psychologists and lifestyle experts through OpenUp, also available to up to three family members. /p /li lipCo-working allowance: Budget for up to two co-working space visits per month, with reimbursement of €35 / $40 per visit. /p /li lipLearning and development budget: Dedicated funding for professional development, including courses, books, conferences, industry events and certifications. /p /li lipCompany equipment: Laptop provided, with an additional budget of up to $250 for a monitor and $150 for accessories such as a keyboard, mouse, microphone and headphones. /p /li lipPremium AI tools: Access to ChatGPT, Hugging Face, Claude Code and other AI tools required to support your work and maximise productivity. /p /li lipHigh-impact responsibilities: Opportunity to independently shape application security practices and contribute to the protection of large-scale AI-powered products. /p /li lipInternational remote environment: Collaborate with experienced professionals in a fast-moving, innovation-driven team with a strong culture of autonomy, ownership and continuous learning. /p /li /ul #J-18808-Ljbffr