Accountabilities

Own and drive application security across the organisation, proactively identifying vulnerabilities and ensuring security risks are addressed throughout the software development lifecycle.

Conduct regular source code reviews to detect security weaknesses before deployment, prioritising critical vulnerabilities and collaborating with engineering teams to implement effective fixes.

Coordinate external security audits and penetration tests, critically evaluating findings, challenging assessments when necessary and ensuring remediation actions are completed.

Develop and automate security processes, scripts and internal tools to improve vulnerability detection, streamline security operations and support scalability.

Integrate AI-powered tools into daily security workflows, leveraging them for code reviews, penetration testing, scripting and security research.

Act as the primary security point of contact, independently defining priorities, managing security initiatives and communicating technical risks clearly to technical and non-technical stakeholders.

Monitor and respond to security alerts, including participating in occasional night and weekend on-call rotations.

Maintain risk registers and relevant Governance, Risk and Compliance (GRC) documentation, ensuring security practices remain organised and up to date.

Promote security awareness across the organisation by sharing relevant updates, providing guidance and delivering internal security training.

Monitor emerging AI-specific security threats, including prompt injection, jailbreaks, content moderation bypasses and vulnerabilities affecting third-party AI providers.

Requirements

At least 2 years of hands-on professional experience in cybersecurity, with a strong focus on application security rather than compliance-only or infrastructure-focused responsibilities.

Demonstrated experience conducting regular source code reviews and identifying, investigating and resolving real application vulnerabilities, with the ability to explain a concrete example of a vulnerability discovered and fixed.

Experience coordinating external security audits or penetration tests and managing remediation efforts through to completion.

Strong engineering skills, including experience working with Git/GitHub, scripting in Python or Bash, and hands-on exposure to modern web technologies such as Ruby on Rails or Node.js.

Familiarity with cloud and hosting environments such as Google Cloud Platform (GCP), Heroku or comparable platforms.

Proven ability to work independently and take ownership of security activities, ideally having served as a sole security specialist, security lead or independent owner of a security function.

Recent practical experience reviewing code or testing systems regularly, ideally on a weekly basis over the past two years.

Daily use of AI-powered tools to support security engineering, research, automation and vulnerability assessment.

Strong analytical and problem-solving abilities, combined with a proactive hacker mindset and genuine enthusiasm for discovering vulnerabilities and making systems more secure.

Excellent communication and collaboration skills, with full professional fluency in English and the ability to explain complex technical risks in accessible terms.

A strong sense of ownership, accountability and commitment, with a goal-oriented approach and the ability to balance hands-on execution with planning and strategic thinking.

Humility, adaptability and openness to feedback, with a willingness to learn and continuously improve.

Comfort working with AI-powered products that may generate uncensored and NSFW content.

Nice to have: Experience with AI and Large Language Model (LLM) security testing, particularly prompt injection, jailbreaking and other adversarial techniques.

Nice to have: Previous experience working in an AI-focused company, technology scale-up or fast-growing digital product environment.

Nice to have: Familiarity with GRC principles, Mobile Device Management (MDM) and identity or access management solutions.

How Jobgether works

We use an AI-powered matching process to ensure your application is reviewed quickly, objectively, and fairly against the role's core requirements. Our system identifies the top-fitting candidates, and this shortlist is then shared directly with the hiring company. The final decision and next steps (interviews, assessments) are managed by their internal team.

We appreciate your interest and wish you the best!

Why Apply Through Jobgether?

Data Privacy Notice: By submitting your application, you acknowledge that Jobgether will process your personal data to evaluate your candidacy and share relevant information with the hiring employer. This processing is based on legitimate interest and pre-contractual measures under applicable data protection laws (including GDPR). You may exercise your rights (access, rectification, erasure, objection) at any time.

#LI-CL1