Clariness is looking for a Senior AI Security Engineer (f/m/d) based Germany, UK, SA, or Serbia.
●Full-time; unlimited -
About the role:
This role is about building, operating and continuously improving Clariness’ security capabilities across applications, cloud infrastructure and AI systems.
As our founding-level security hire, you will establish the security engineering function, define its priorities and work directly with engineering teams to embed effective security controls throughout our technology environment.
As a Senior AI Security Engineer, you would be responsible for:
●Defining Clariness’ security engineering strategy and roadmap, and building and operating the security function across application security, cloud security, AI and LLM security, vulnerability management and supporting security tooling.
●Working directly with engineering teams on secure system design, threat modelling, penetration testing and vulnerability remediation, while embedding appropriate security controls into development processes and CI/CD pipelines.
●Owning AI security and governance across LLM-powered features, RAG systems and agentic pipelines, including assessing and mitigating risks covered by the OWASP Top 10 for LLM Applications.
●Designing and validating safeguards for AI agents, including sandboxing, privilege and access controls, secure tool use and adversarial red teaming of AI systems.
●Evaluating, deploying and continuously improving AI-powered security automation, including autonomous vulnerability triage, LLM-powered alert analysis, compliance evidence gathering and AI-assisted threat intelligence.
●Assessing commercial and open-source security tools based on effectiveness, operational fit and cost, and developing custom solutions where existing tooling does not meet Clariness’ requirements.
●Managing Clariness’ IT security compliance programme—including SOC 2 Type II, applicable EU AI Act high-risk obligations, GDPR Article 32 technical measures and GxP IT security controls—while maintaining audit-ready documentation and acting as the primary security liaison for external auditors, regulators, Legal and Compliance.
We would like you to have:
●At least five years of hands-on experience in security engineering, application security or information security, with strong technical depth beyond advisory or governance responsibilities.
●Proven experience building or significantly developing a security programme within a product engineering environment, ideally as an early or founding security hire.
●Strong practical experience across application security, cloud security, secure software development, threat modelling, penetration testing, vulnerability management and security controls within CI/CD pipelines.
●Experience assessing, testing or implementing security controls for LLM-powered applications, RAG systems or agentic pipelines.
●Hands-on experience with AI agents, either building them for security automation or securing them through adversarial testing, sandboxing and privilege controls.
●Demonstrable compliance experience involving at least one SOC 2 audit cycle, GDPR programme ownership or implementation of EU AI Act requirements, including the ability to produce audit-ready documentation and work with external auditors.
●Experience in a regulated industry such as clinical research, pharmaceuticals, healthtech or fintech, with knowledge of GxP or comparable regulated data-handling requirements considered a strong advantage, alongside strong English communication skills at C1 level.
You may ask now, why should I work for you? Let us give you a few reasons – and you'll learn more during the process.
●A varied and exciting job with a lot of personal responsibility in an international company, where you can develop and expand your skills.
●Professional and personal development opportunities - incl. personal development budget.
●Flexible working hours and mobile working.
●Regular team events and open feedback culture.
●A versatile field of activity and challenging projects.
●A supportive and open company culture, providing the opportunity to collaborate with a diverse and professional team.
●Impact healthcare by accelerating medical innovation through improved access to clinical trials, potentially bringing needed treatments to patients faster.