security engineer for AI security

Taxfix provides an intuitive tax-filing app that helps people file their taxes and claim refunds with confidence. The Taxfix Group operates across Germany, Spain, and the UK through its Taxfix and Steuerbot brands, serving customers with support from tax experts, developers, and IT security professionals.

• Develop tools, capabilities, and agentic skills that support compliance with the EU AI Act, GDPR, and security standards;
• Co-design and govern the permissioning framework for agent access;
• Own MDM, endpoint security, and identity and access management across internal systems;
• Lead incident response for security events involving agents or internal infrastructure;
• Build, harden, and evolve the agentic platform layer, including secure sandboxes, credential vaults, and CI/CD pipelines with embedded security checks;
• Define internal platform standards that make the secure path the default path;
• Design and run adversarial testing exercises against agent deployments;
• Maintain a library of AI-specific attack patterns and test cases for internal business operations;
• Brief leadership on emerging AI threat vectors and translate them into practical mitigations;
• Partner with Legal, Risk and Compliance to translate regulatory requirements into engineering-led solutions.

• Have a solid background in security engineering;
• Have hands-on experience in penetration testing, threat modelling, or red teaming;
• Understand AI and machine learning-specific attack surfaces, including prompt injection, data poisoning, model inversion, and indirect injection via documents or APIs;
• Have practical experience designing and enforcing least-privilege architectures;
• Know identity and access management in real-world environments;
• Understand GDPR and DSGVO in practice;
• Have built or audited data classification and retention frameworks;
• Be comfortable with CI/CD pipelines, secrets management, sandbox environments, scripting, and automation;
• Have network security fundamentals and experience assessing third-party providers;
• Communicate clearly and document rigorously;
• Work collaboratively with engineers and builders.

• Free mental health coaching sessions and yoga;
• Monthly allowance for a broad range of services, with unused allowance rollover;
• Employee stock options for all employees;
• 30 Annual vacation days;
• Flexible working hours;
• Learning budget and guidance from internal L&D experts;
• Work from abroad for up to six weeks every year;
• Team meetups and get-togethers;
• Free tax declaration filing through the Taxfix app;
• Internal support for personal tax-related questions;
• Dogs are welcome in the office.