Security Engineer – AI Application Security & GRC

About the role

Workster is partnering with an international technology company to recruit a Security Engineer specialising in AI, application security (AppSec) and governance, risk and compliance (GRC). In this role you will help protect AI‑powered products, applications and services throughout their development and operation.

Key responsibilities

• Assess the security of AI‑powered products, applications, APIs and supporting infrastructure.
• Embed security requirements and practices into the software development lifecycle from design through deployment.
• Conduct or coordinate application security reviews, threat modelling, vulnerability assessments and penetration testing.
• Identify, prioritise and support remediation of security vulnerabilities, including AI‑specific risks.
• Review AI system design and data flows for risks such as prompt injection, data leakage and insecure model access.
• Develop and maintain secure coding standards, technical security guidance and AppSec policies.
• Advise engineering teams on secure architecture, authentication, authorisation, encryption, secrets management and API security.
• Establish and maintain security governance, risk and compliance processes for products and internal systems.

Required profile

• Professional experience in security engineering, application security or related fields.
• Experience assessing and securing web applications, APIs, cloud services or software platforms.
• Understanding of secure software development, threat modelling, vulnerability management and security testing.
• Experience with governance, risk and compliance activities such as risk assessments and audit support.
• Familiarity with security frameworks and standards such as ISO 27001, NIST or SOC 2.
• Knowledge of cloud security, identity and access management, encryption and secure configuration principles.
• Awareness of AI and machine learning security risks, including data, model and inference‑time threats.
• Strong analytical, problem‑solving and communication skills in English.

Required skills

• Application security
• Threat modelling
• Vulnerability management
• Security testing
• ISO 27001, NIST, SOC 2 frameworks
• Cloud security
• Identity and Access Management (IAM)
• Encryption
• Secure coding standards
• Code scanning tools
• Cloud security platforms
• GRC systems

What we offer

• Opportunity to strengthen the security of AI‑powered products and services.
• Collaborative work with engineering, product, data, legal and compliance teams.
• Meaningful involvement in application security and security governance initiatives.
• Professional development in a rapidly evolving technology and security sector.
• International and multidisciplinary working environment.