Senior AI Security Engineer

<p><strong>Clariness is looking for a Senior AI Security Engineer (f/m/d) based Germany, UK, SA, or Serbia.<br>- Full-time; unlimited -</strong></p><p><strong>About the role:</strong></p><p>This role is about building, operating and continuously improving Clariness’ security capabilities across applications, cloud infrastructure and AI systems. As our founding-level security hire, you will establish the security engineering function, define its priorities and work directly with engineering teams to embed effective security controls throughout our technology environment.</p><p><strong>As a Senior AI Security Engineer, you would be responsible for:</strong></p><ul><li><p>Defining Clariness’ security engineering strategy and roadmap, and building and operating the security function across application security, cloud security, AI and LLM security, vulnerability management and supporting security tooling.</p></li><li><p>Working directly with engineering teams on secure system design, threat modelling, penetration testing and vulnerability remediation, while embedding appropriate security controls into development processes and CI/CD pipelines.</p></li><li><p>Owning AI security and governance across LLM-powered features, RAG systems and agentic pipelines, including assessing and mitigating risks covered by the OWASP Top 10 for LLM Applications.</p></li><li><p>Designing and validating safeguards for AI agents, including sandboxing, privilege and access controls, secure tool use and adversarial red teaming of AI systems.</p></li><li><p>Evaluating, deploying and continuously improving AI-powered security automation, including autonomous vulnerability triage, LLM-powered alert analysis, compliance evidence gathering and AI-assisted threat intelligence.</p></li><li><p>Assessing commercial and open-source security tools based on effectiveness, operational fit and cost, and developing custom solutions where existing tooling does not meet Clariness’ requirements.</p></li><li><p>Managing Clariness’ IT security compliance programme—including SOC 2 Type II, applicable EU AI Act high-risk obligations, GDPR Article 32 technical measures and GxP IT security controls—while maintaining audit-ready documentation and acting as the primary security liaison for external auditors, regulators, Legal and Compliance.</p></li></ul><p><strong>We would like you to have: </strong></p><ul><li><p>At least five years of hands-on experience in security engineering, application security or information security, with strong technical depth beyond advisory or governance responsibilities.</p></li><li><p>Proven experience building or significantly developing a security programme within a product engineering environment, ideally as an early or founding security hire.</p></li><li><p>Strong practical experience across application security, cloud security, secure software development, threat modelling, penetration testing, vulnerability management and security controls within CI/CD pipelines.</p></li><li><p>Experience assessing, testing or implementing security controls for LLM-powered applications, RAG systems or agentic pipelines.</p></li><li><p>Hands-on experience with AI agents, either building them for security automation or securing them through adversarial testing, sandboxing and privilege controls.</p></li><li><p>Demonstrable compliance experience involving at least one SOC 2 audit cycle, GDPR programme ownership or implementation of EU AI Act requirements, including the ability to produce audit-ready documentation and work with external aud