Security engineer, application security (UK)

Responsibilities

We are representing a confidential enterprise AI organization seeking a security engineer focused on application security. In this role, you will build security foundations that protect AI systems at enterprise scale, working at the intersection of application security, AI infrastructure, and developer enablement.

Your core responsibilities include:

• Conducting threat modeling sessions with product teams and designing secure architectures for new features, ensuring security considerations shape product decisions from the earliest stages
• Owning and evolving the application security program, including establishing and maintaining SAST/DAST scanning in CI/CD pipelines, conducting security code reviews for critical changes, and building automation to catch vulnerabilities before production
• Partnering with engineering teams to establish secure coding standards, creating reusable security patterns and libraries that make it easier for developers to build securely by default
• Designing and recommending security features and products that help secure customer environments, serving as the advocate for how the organization protects customers
• Integrating and leveraging AI agents to increase velocity for the security team and broader engineering organization, ensuring proactive risk minimization while building products
• Leading security assessments and penetration testing of applications, AI services, and APIs, identifying vulnerabilities across the tech stack and working collaboratively with teams to remediate issues at scale
• Designing and implementing security controls for protecting data pipelines, model training environments, and customer-facing AI agents
• Staying ahead of emerging threats in the AI/ML security landscape, researching attack vectors specific to LLMs and generative AI, and proactively building defenses against novel risks

What we're looking for

• 4+ years of hands-on experience in application security engineering, with a proven track record of securing large-scale production systems; experience in fast-growing startups or high-growth environments is a bonus
• Understanding of developer experience and developer workflows for shipping features and products, with a deep care for reducing risk while considering engineering velocity
• Technical expertise in at least two programming languages (Python, Java, Go, JavaScript/TypeScript) and the ability to read and review code across multiple languages, understanding both business logic and security implications
• Knowledge of security tools and methodologies including SAST/DAST solutions, vulnerability management platforms, security testing frameworks, and DevSecOps practices
• Excellent communication skills that allow you to translate complex security concepts into clear recommendations for both technical and non-technical audiences
• A builder's mindset that looks for opportunities to automate, scale, and empower rather than create bottlenecks—you understand that security enables the business
• Experience or strong interest in AI/ML security challenges

This is a hybrid role based in London, UK.

How we work with you

Our talent team at Get A Job.ai partners with leading technology companies to connect exceptional candidates with high-impact opportunities. When you apply through our platform, a dedicated recruiter will review your background and conduct an initial screening. If there's a strong match, we'll submit your profile to our client and guide you through their interview process. Please apply exclusively through Get A Job.ai—direct contact with the client is not part of our process.

Pay

Compensation details will be discussed during the screening process and are competitive for this level and location in the enterprise technology sector.

Equal Opportunity

Get A Job.ai is committed to inclusive hiring practices and welcomes applications from candidates of all backgrounds. We evaluate talent based on skills, experience, and potential to succeed in the role.