Security Engineer (Remote - Netherlands)

Role overview Take ownership of application security for an AI-powered consumer platform, working directly with product engineers to find and resolve weaknesses in the web application. This is a hands-on role with room to set priorities independently, communicate risk across the organization, and address emerging threats involving AI-generated content, including prompt injection and content-filter bypass attempts.

Responsibilities - Review application code on a regular basis and identify meaningful vulnerabilities across the stack. - Rank security findings, coordinate remediation with engineers, and confirm that fixes address the underlying issue. - Organize external security audits and penetration tests, evaluate their findings, and follow issues through to closure. - Automate repeatable security tasks and use AI tools in daily code review, testing, and scripting work. - Own security priorities with limited support; explain risks clearly, maintain basic governance records, and share security guidance with colleagues. - Track AI-specific threats and service-provider incidents, and participate in alert response, including occasional night or weekend on-call.

Requirements - Two or more years of hands-on security experience, with a strong application security focus rather than compliance-only work. - Regular code review experience and a concrete example of a vulnerability found and fixed. - Experience coordinating an external audit or penetration test and ensuring findings are remediated. - Ability to work independently, communicate technical risks to non-specialists, and contribute code through Git-based workflows. - Python or Bash scripting experience and recent hands-on exposure to a modern web stack and cloud or hosting environment. - Daily use of AI tools in security work and a practical interest in testing systems to uncover and resolve weaknesses.

Benefits and work setup - Fully remote, with the position listed for the Netherlands. B2B contracting is preferred, but other arrangements may be considered. - 20 working days of paid time off annually and a yearly in-person gathering. - Monthly health insurance support, one-to-one wellbeing sessions, and a coworking budget for up to two visits per month. - Learning budget, laptop and equipment support, and premium access to AI tools.