Security Engineer (Remote - Croatia)

Role overview Own application security for an AI-powered consumer platform, working hands-on across its web application code. You’ll identify and prioritize vulnerabilities, guide engineers through fixes, and set security priorities with considerable independence. The work also covers risks specific to AI-generated content, such as prompt injection and attempts to bypass content safeguards.

Responsibilities - Review application code regularly and uncover security weaknesses across the stack. - Prioritize findings, work with engineers on remediation, and verify fixes. - Coordinate external security audits and penetration tests; assess findings and track them through resolution. - Build automation and scripts to make security reviews and testing more effective, using AI tools in daily workflows. - Explain security risks clearly to technical and non-technical colleagues, maintain basic risk and governance records, and provide security awareness updates. - Monitor AI-related threats and provider incidents, and respond to security alerts, including occasional night or weekend on-call.

Requirements - At least two years of practical security experience, including regular, hands-on application security work. - Ability to describe a real vulnerability you found and helped fix, and experience coordinating an external audit or penetration test through remediation. - Experience taking independent ownership of security work and explaining technical risk in accessible terms. - Working knowledge of Git-based development workflows and scripting with Python or Bash. - Recent experience with a modern web application stack and cloud or hosting environments; examples in the source include Rails or Node and GCP or Heroku. - Daily use of AI tools in security work and comfort testing systems to make them safer.

Benefits and work setup - Fully remote, with the role listed for Croatia; a B2B arrangement is preferred, with flexibility around contract type. - 20 working days of paid time off each year and an annual in-person team gathering. - Monthly health insurance support, access to one-to-one wellbeing sessions, and a coworking allowance for up to two visits per month. - Learning funds, a provided laptop, equipment budgets, and access to premium AI tools.