Security Engineer (Remote - Germany)

Job description

OUR VISION & PRODUCTS 🚀 EverAI — Building the Future of AI Companionship One of the Top 15 Largest & Fastest-Growing AI Companies in the World 50 Million Users in 2 years — Help Us Reach 100M first, 500M next At EverAI, we’re shaping what it means to connect with AI. With 50 million users and counting, we're not just building products — we're creating entirely new categories. Our flagship product is the world’s largest AI companionship platform, redefining relationships for millions. It is governed by our proprietary moderation system, EverGuard — an internal AI designed to ensure everything we build is safe, ethical, and human-first. And we’re only just getting started! OUR TEAM We are an enthusiastic, passionate and hardworking team of ≈ 100 people. Our founding team has strong entrepreneurial experience building and scaling web products from 0 to IPO. Alexis Soulopoulos [CEO] • 10+ years in Tech Executive Leadership • Co-Founder Mad Paws Holdings (from 0 to IPO) • Forbes 30 under 30 + Deloitte TechFast50 ’22 & ‘23 Michael Monin [Co-founder & CTO] • 10+ years as CTO / COO (web2/web3), 3 years in AI/LLM • Serial-entrepreneur: MTK Digital (exited / 0->$20m revenue) and Zipchat (AI Chatbot for E-commerce brands) Thomas Lacroix [Co-founder & CMO] • 8+ years in Customer Acquisition & E-commerce Growth • Serial-entrepreneur: Curatible (sold to Blackstone) and MTK Digital (exited / 0->$20m revenue) Maruša Fasano [CFO/Legal] • 25+ years in Finance, Strategy, M&A • Ex-CFO/M&A @Curatible (exited to Blackstone) • Ex-President of the Board @SotremoSA (exited) • Co-founder/CFO @SoftOne (exited) YOUR ROLE As a Security Engineer, you’ll own application security for a fast-growing AI companionship platform. This is a hands-on AppSec role: you’ll review code, find real vulnerabilities and drive fixes across the stack. You’ll be the main security person in the company, reporting directly to our CTO and Co-Founder. You’ll set direction yourself and explain risk clearly to non-security colleagues. Our product includes AI-generated content, including NSFW content, and you’ll also keep an eye on AI-specific threats like prompt injection. Real ownership from day one. This isn’t an infrastructure, networking or DevSecOps role: we’re looking for application security depth. KEY RESPONSIBILITIES APPLICATION SECURITY (THE CORE OF THE ROLE) - Review code every week to catch vulnerabilities before they ship - Find, prioritize and drive fixes for real vulnerabilities across the stack, not surface-level issues AUDITS AND PENTESTS - Coordinate external security audits and penetration tests - Challenge findings where needed, and follow them through to fixes ENGINEERING AND AUTOMATION - Automate security work and build the tools you need to scale it - Use AI tools daily in your security work: code review, pentests and scripting OWNERSHIP AND COMMUNICATION - Own security end to end with little support, and decide what matters most - Explain technical risk in plain words to the team and leadership - Cover security alerts, including occasional night and weekend on-call ALSO PART OF THE ROLE (LIGHTER) - Keep a simple risk register and GRC documentation up to date - Share security updates with the team and run awareness training - Watch emerging AI threats (prompt injection, jailbreaks, content filter bypass) and incidents at our AI providers YOUR QUALIFICATIONS MUST-HAVES - 2+ years of hands-on security experience - Hands-on AppSec, not compliance only: you review code regularly and can walk us through a real vulnerability you found and fixed - Audits and pentests: you’ve coordinated an external audit or pentest and followed the findings through to fixes - Engineering workflows: you ship code with Git/GitHub, script in Python or Bash, and have recent hands-on work on a modern web stack (e.g. Rails, Node; GCP, Heroku or similar) - Ownership with little support: you’ve been the sole or lead security person, or owned a security area on your own. You’ve reviewed code or tested systems every week in the last 2 years, and you explain risk clearly to non-technical people - AI in your daily work: you use AI tools every day in your security work - A hacker mindset: You love breaking things to make them safer, and security isn’t only your job: you do it for fun too, through bug bounties, CTFs, research, write-ups or your own tools. NICE-TO-HAVES - ⭐ AI/LLM security testing (prompt injection, jailbreaking): a strong plus - Experience at an AI company or a scale-up - GRC awareness - Familiarity with MDM and access management SOFT SKILLS 🗣 Strong communication & collaborative skills (perfectly fluent in English) 🧢 Goal-orientated, ownership and commitment ⚡️ Doer mindset - we are moving fast and we need people who can find the right balance between executing, planning and strategy 🧢 Humble - willing to learn, open to feedback 🍭 #NSFW - y