[Hiring] Security Engineer @EverAI

Role Description

As a Security Engineer , you’ll own application security for a fast-growing AI companionship platform. This is a hands-on AppSec role: you’ll review code, find real vulnerabilities and drive fixes across the stack. You’ll be the main security person in the company, reporting directly to our CTO and Co-Founder. You’ll set direction yourself and explain risk clearly to non-security colleagues. Our product includes AI-generated content, including NSFW content, and you’ll also keep an eye on AI-specific threats like prompt injection. Real ownership from day one.

This isn’t an infrastructure, networking or DevSecOps role: we’re looking for application security depth.

Key Responsibilities

• Application security (the core of the role)
• Review code every week to catch vulnerabilities before they ship
• Find, prioritize and drive fixes for real vulnerabilities across the stack, not surface-level issues
• Audits and pentests
• Coordinate external security audits and penetration tests
• Challenge findings where needed, and follow them through to fixes
• Engineering and automation
• Automate security work and build the tools you need to scale it
• Use AI tools daily in your security work: code review, pentests and scripting
• Ownership and communication
• Own security end to end with little support, and decide what matters most
• Explain technical risk in plain words to the team and leadership
• Cover security alerts, including occasional night and weekend on-call
• Also part of the role (lighter)
• Keep a simple risk register and GRC documentation up to date
• Share security updates with the team and run awareness training
• Watch emerging AI threats (prompt injection, jailbreaks, content filter bypass) and incidents at our AI providers

Qualifications

• 2+ years of hands-on security experience
• Hands-on AppSec, not compliance only: you review code regularly and can walk us through a real vulnerability you found and fixed
• Audits and pentests: you’ve coordinated an external audit or pentest and followed the findings through to fixes
• Engineering workflows: you ship code with Git/GitHub, script in Python or Bash, and have recent hands-on work on a modern web stack (e.g. Rails, Node; GCP, Heroku or similar)
• Ownership with little support: you’ve been the sole or lead security person, or owned a security area on your own. You’ve reviewed code or tested systems every week in the last 2 years, and you explain risk clearly to non-technical people
• AI in your daily work: you use AI tools every day in your security work
• A hacker mindset: You love breaking things to make them safer, and security isn’t only your job: you do it for fun too, through bug bounties, CTFs, research, write-ups or your own tools.

Nice-to-haves

• AI/LLM security testing (prompt injection, jailbreaking): a strong plus
• Experience at an AI company or a scale-up
• GRC awareness
• Familiarity with MDM and access management

Soft Skills

• Strong communication & collaborative skills (perfectly fluent in English)
• Goal-orientated, ownership and commitment
• Doer mindset - we are moving fast and we need people who can find the right balance between executing, planning and strategy
• Humble - willing to learn, open to feedback
• #NSFW - you are comfortable working in an environment with products that are based on uncensored models and content

Benefits

• Contract Type: We prefer B2B, but we’re flexible, what matters is long-term commitment and impact
• Work From Anywhere: Fully remote. Choose the environment where you do your best work
• Paid Time Off: 4 weeks (20 working days) of PTO per year to recharge and reset
• Annual Gathering: A yearly in-person meetup to connect, brainstorm, and celebrate wins together
• Health & Wellness Support: Monthly allowance of 100 USD for health insurance expenses & access to unlimited 1:1 sessions with psychologists and lifestyle experts through OpenUp (also available to up to three of your family members)
• Co-Working Space Budget: Work from a co-working space up to twice per month (35 EUR / 40 USD per visit) to stay inspired and connected
• Learning Budget: Dedicated funds to support your professional growth: courses, books, conferences, events, or certifications
• Company Laptop & Equipment: Laptop provided + monitor budget up to 250 USD + keyboard/mouse/mic/headphones budget up to 150 USD
• AI Tools Access: Premium access to ChatGPT, Hugging Face, Claude Code, and any other tool needed to excel at your job, power your ideas and workflows