Application & AI Cyber Security Engineer
EQT Ventures is the early-stage venture capital strategy of EQT Group, partnering with founders building 'Generation-Defining Companies.' With 1.1 billion euro invested behind the strategy, EQT Ventures acts as an early-stage lead investor, operational advisor, and high-conviction capital provider for ambitious European founders, typically investing between 2-50M EUR.
About EQT Ventures
EQT Ventures partners with founders building Generation-Defining Companies, aiming to back ambitious visions that can become game-changing, resilient businesses. As early-stage lead investors, operational advisors, and high-conviction capital providers, the team—made up of ex-founders and operators—provides hands-on support to help portfolio companies scale fast, break through barriers with access to the global EQT platform, and build long-term resilience. EQT Ventures is domiciled in Luxembourg, with investment advisors located in Stockholm, Paris, London, New York, Berlin and Amsterdam, and is focused on European companies, having backed over 140 founding teams to date across sectors such as AI, fintech, edtech, robotics, and aerospace. The firm operates through multiple funds, including EQT Ventures I, II, and III, with clients/portfolio companies ranging from early-stage startups like Sana Labs, 1X, Payrails, Parloa, and The Exploration Company.
Skills
About the Role
You will own the security posture of hosted applications, container platforms, and AI environments, building automated guardrails and real-time visibility so the secure path is the easy path across a modern, globally distributed technology landscape. You'll design automated controls for containers and application deployments, enable citizen development with AI coding tools, curate internal security tooling for cost and reliability, own container security standards, manage software supply chain risk, build application security observability, and secure EQT's AI platforms against threats like prompt injection and data exfiltration. You'll also assess MCP connector risk, define behavioral baselines for agentic execution, and collaborate closely with detection, identity, and cloud security engineers.
Requirements
- Proven hands-on experience with container security including Kubernetes, image scanning, admission control, runtime protection, and policy-as-code
- A track record of building automated security controls that scale
- Solid application security fundamentals including OWASP Top 10, secure development lifecycle, and software supply chain risk
- Experience building security visibility into running systems through instrumentation, runtime analysis, or operational dashboards
- Active use of AI-assisted development tools such as Claude Code, GitHub Copilot, or equivalent
- Early or growing experience in AI and LLM security including prompt injection, data exfiltration, model API security, or agentic system controls
- Ability to communicate complex technical findings clearly to senior stakeholders
Responsibilities
- Design and deploy automated controls for container platforms and application deployments, including admission controllers, policy-as-code, and pre-configured scanning
- Enable citizen development by making AI coding tools like Claude Code and CoWork usable without requiring security review
- Curate internal security tooling, automation, and AI skills for cost, reliability, and security posture
- Own container security standards including image scanning policy, runtime baselines, and registry governance
- Manage software supply chain risk end-to-end including dependency scanning and composition analysis
- Build application security observability providing a live picture of deployments and risk concentration
- Own the security configuration of EQT's AI platforms including hardening, access controls, and data flow governance
- Assess MCP connector risk including API call patterns, data processing terms, and allowlist maintenance
- Define behavioural baselines for agentic execution environments and close AI-specific insider threat gaps
- Collaborate with Detection & Insider Threat Engineers and Identity & Cloud Security Engineers
Benefits
- Paid time off
- Parental leave
- Wellbeing and wellness support
- Flexible working arrangements
- Learning and development opportunities