AI Security Engineer

About the role

This role involves building, operating, and improving security capabilities across applications, cloud infrastructure, and AI systems. As the founding-level security hire, you will establish the security engineering function, define its roadmap, and collaborate with engineering teams to embed security controls throughout the technology environment.

Responsibilities

• Defining Clariness' security engineering strategy and roadmap, and building and operating the security function across application security, cloud security, AI and LLM security, vulnerability management and supporting security tooling.
• Working directly with engineering teams on secure system design, threat modelling, penetration testing and vulnerability remediation, while embedding appropriate security controls into development processes and CI/CD pipelines.
• Owning AI security and governance across LLM-powered features, RAG systems and agentic pipelines, including assessing and mitigating risks covered by the OWASP Top 10 for LLM Applications.
• Designing and validating safeguards for AI agents, including sandboxing, privilege and access controls, secure tool use and adversarial red teaming of AI systems.
• Evaluating, deploying and continuously improving AI-powered security automation, including autonomous vulnerability triage, LLM-powered alert analysis, compliance evidence gathering and AI-assisted threat intelligence.
• Assessing commercial and open-source security tools based on effectiveness, operational fit and cost, and developing custom solutions where existing tooling does not meet Clariness' requirements.
• Managing Clariness' IT security compliance programme—including SOC 2 Type II, applicable EU AI Act high-risk obligations, GDPR Article 32 technical measures and GxP IT security controls—while maintaining audit-ready documentation and acting as the primary security liaison for external auditors, regulators, Legal and Compliance.

Required skills

• Security engineering
• Application security
• Cloud security
• Threat modelling
• Penetration testing
• Vulnerability management
• CI/CD pipelines
• LLM security
• RAG systems
• AI agents
• SOC 2
• GDPR
• EU AI Act

Nice to have

• GxP
• Clinical research
• Pharmaceuticals
• Healthtech
• Fintech

Qualifications

• At least five years of hands-on experience in security engineering, application security or information security

Benefits

• Personal development budget
• Flexible working hours
• Mobile working
• Team events

About the Company

Clariness impacts healthcare by accelerating medical innovation through improved access to clinical trials, potentially bringing needed treatments to patients faster.