Clariness
Senior AI Security Engineer (f/m/d)
Founding-level security hire who builds and runs Clariness' security engineering function across applications, cloud, and AI/LLM systems — threat modelling, pen testing, secure CI/CD, and AI-agent safeguards — while owning compliance (SOC 2, GDPR Art. 32, EU AI Act, GxP) and audit readiness.
- Compensation
- Not disclosed
- Location
- Berlin or Hamburg, Remote within Germany, Cape Town, UK, or Serbia
- Work setup
- Remote
- Seniority
- Senior
- Employment
- Full time
- Experience
- Not specified
- Category
- Security
- Posted
Skills
Must have
- At least 5 years of hands-on experience in security engineering, application security or information security
- Proven experience building or significantly developing a security programme within a product engineering environment, ideally as an early or founding security hire
- Strong practical experience across application security, cloud security, secure software development, threat modelling, penetration testing, vulnerability management and security controls within CI/CD
- Experience assessing, testing or implementing security controls for LLM-powered applications, RAG systems or agentic pipelines
- Hands-on experience with AI agents, either building them for security automation or securing them through adversarial testing, sandboxing and privilege controls
- Demonstrable compliance experience involving at least one SOC 2 audit cycle, GDPR programme ownership or implementation of EU AI Act requirements, including audit-ready documentation and work with ext
- Strong English communication skills at C1 level
Nice to have
- Experience in a regulated industry such as clinical research, pharmaceuticals, healthtech or fintech
- Knowledge of GxP or comparable regulated data-handling requirements
Full description
**Clariness is looking for a Senior AI Security Engineer (f/m/d) based Germany, UK, SA, or Serbia.
- Full-time; unlimited -About the role:**
This role is about building, operating and continuously improving Clariness’ security capabilities across applications, cloud infrastructure and AI systems. As our founding-level security hire, you will establish the security engineering function, define its priorities and work directly with engineering teams to embed effective security controls throughout our technology environment.
As a Senior AI Security Engineer, you would be responsible for:
- Defining Clariness’ security engineering strategy and roadmap, and building and operating the security function across application security, cloud security, AI and LLM security, vulnerability management and supporting security tooling.
- Working directly with engineering teams on secure system design, threat modelling, penetration testing and vulnerability remediation, while embedding appropriate security controls into development processes and CI/CD pipelines.
- Owning AI security and governance across LLM-powered features, RAG systems and agentic pipelines, including assessing and mitigating risks covered by the OWASP Top 10 for LLM Applications.
- Designing and validating safeguards for AI agents, including sandboxing, privilege and access controls, secure tool use and adversarial red teaming of AI systems.
- Evaluating, deploying and continuously improving AI-powered security automation, including autonomous vulnerability triage, LLM-powered alert analysis, compliance evidence gathering and AI-assisted threat intelligence.
- Assessing commercial and open-source security tools based on effectiveness, operational fit and cost, and developing custom solutions where existing tooling does not meet Clariness’ requirements.
- Managing Clariness’ IT security compliance programme—including SOC 2 Type II, applicable EU AI Act high-risk obligations, GDPR Article 32 technical measures and GxP IT security controls—while maintaining audit-ready documentation and acting as the primary security liaison for external auditors, regulators, Legal and Compliance.
We would like you to have:
- At least five years of hands-on experience in security engineering, application security or information security, with strong technical depth beyond advisory or governance responsibilities.
- Proven experience building or significantly developing a security programme within a product engineering environment, ideally as an early or founding security hire.
- Strong practical experience across application security, cloud security, secure software development, threat modelling, penetration testing, vulnerability management and security controls within CI/CD pipelines.