Security Engineer AI - AppSec, GRC

Workster is partnering with an international technology company to recruit a Security Engineer specialising in AI, application security (AppSec) and governance, risk and compliance (GRC). In this role, you will help protect AI-powered products, applications and services throughout their development and operation.

You will work closely with engineering, product, data, legal and compliance teams to identify security risks and build practical safeguards into technology and processes. The ideal candidate brings experience in application security and security governance, with an understanding of the risks and controls associated with AI systems.

#### Your Responsibilities

• Assess the security of AI-powered products, applications, APIs and supporting infrastructure
• Embed security requirements and practices into the software development lifecycle, from design and development through deployment and maintenance
• Conduct or coordinate application security reviews, threat modelling, vulnerability assessments and penetration testing
• Identify, prioritise and support remediation of security vulnerabilities, including risks specific to AI systems and integrations
• Review AI system design and data flows for risks such as prompt injection, data leakage, insecure model access and misuse of outputs
• Develop and maintain secure coding standards, technical security guidance and AppSec policies
• Advise engineering teams on secure architecture, authentication, authorisation, encryption, secrets management and API security
• Support security controls for AI models, datasets, third-party services and model development or deployment workflows
• Establish and maintain security governance, risk and compliance processes for products, services and internal systems
• Contribute to risk assessments, control evaluations, audit evidence and remediation plans
• Help map security practices to relevant frameworks, standards and regulatory requirements
• Collaborate with privacy, legal, compliance and risk teams on data protection and responsible AI considerations
• Support security incident readiness and contribute to the investigation and resolution of application or AI-related security incidents
• Track security metrics, prepare reports and communicate risks, findings and recommendations to technical and non-technical stakeholders
• Keep up to date with application security practices, AI threats, security standards and relevant regulatory developments

#### Your Qualifications

• Professional experience in security engineering, application security, information security or a related field
• Experience assessing and securing web applications, APIs, cloud services or software platforms
• Understanding of secure software development, threat modelling, vulnerability management and security testing
• Knowledge of common application security risks and relevant testing approaches
• Experience with governance, risk and compliance activities, such as risk assessments, control reviews or audit support
• Familiarity with security frameworks and standards such as ISO 27001, NIST or SOC 2
• Understanding of cloud security, identity and access management, encryption and secure configuration principles
• Awareness of AI and machine learning security risks, including data, model and inference-time threats
• Ability to assess technical risks and explain their impact and remediation options clearly
• Strong analytical and problem-solving skills, with attention to detail and a practical approach to risk
• Ability to work collaboratively with engineering, product, data, legal and compliance teams
• Strong written and verbal communication skills, including the ability to prepare clear security documentation
• Ability to manage competing priorities and contribute effectively in a changing technology environment
• Experience with security testing tools, code scanning, cloud security platforms or GRC systems is an advantage
• Relevant security certifications or training are an advantage
• Fluent English, both written and spoken

#### The Offer

• Opportunity to strengthen the security of AI-powered products and services
• Collaborative work with engineering, product, data, legal and compliance teams
• Meaningful involvement in application security and security governance initiatives
• Professional development in a rapidly evolving technology and security sector
• International and multidisciplinary working environment