Security Engineer (Remote - Germany)

Our Vision & Products 🚀 EverAI — Building the Future of AI Companionship One of the Top 15 Largest & Fastest-Growing AI Companies in the World 50 Million Users in 2 years — Help Us Reach 100M first, 500M next At EverAI , we’re shaping what it means to connect with AI. With 50 million users and counting , we're not just building products — we're creating entirely new categories. Our flagship product is the world’s largest AI companionship platform , redefining relationships for millions. It is governed by our proprietary moderation system, EverGuard — an internal AI designed to ensure everything we build is safe, ethical, and human-first . And we’re only just getting started! Our Team We are an enthusiastic, passionate and hardworking team of ≈ 100 people. Our founding team has strong entrepreneurial experience building and scaling web products from 0 to IPO. Alexis Soulopoulos [CEO] • 10+ years in Tech Executive Leadership • Co-Founder Mad Paws Holdings (from 0 to IPO) • Forbes 30 under 30 + Deloitte TechFast50 ’22 & ‘23 Michael Monin [Co-founder & CTO] • 10+ years as CTO / COO (web2/web3), 3 years in AI/LLM • Serial-entrepreneur: MTK Digital (exited / 0->$20m revenue) and Zipchat (AI Chatbot for E-commerce brands) Thomas Lacroix [Co-founder & CMO] • 8+ years in Customer Acquisition & E-commerce Growth • Serial-entrepreneur: Curatible (sold to Blackstone) and MTK Digital (exited / 0->$20m revenue) Maruša Fasano [CFO/Legal] • 25+ years in Finance, Strategy, M&A • Ex-CFO/M&A @Curatible (exited to Blackstone) • Ex-President of the Board @SotremoSA (exited) • Co-founder/CFO @SoftOne (exited) Your Role As a Security Engineer , you’ll own application security for a fast-growing AI companionship platform. This is a hands-on AppSec role: you’ll review code, find real vulnerabilities and drive fixes across the stack. You’ll be the main security person in the company, reporting directly to our CTO and Co-Founder. You’ll set direction yourself and explain risk clearly to non-security colleagues. Our product includes AI-generated content, including NSFW content, and you’ll also keep an eye on AI-specific threats like prompt injection. Real ownership from day one. This isn’t an infrastructure, networking or DevSecOps role: we’re looking for application security depth. Key Responsibilities Application security (the core of the role) Review code every week to catch vulnerabilities before they ship Find, prioritize and drive fixes for real vulnerabilities across the stack, not surface-level issues Audits and pentests Coordinate external security audits and penetration tests Challenge findings where needed, and follow them through to fixes Engineering and automation Automate security work and build the tools you need to scale it Use AI tools daily in your security work: code review, pentests and scripting Ownership and communication Own security end to end with little support, and decide what matters most Explain technical risk in plain words to the team and leadership Cover security alerts, including occasional night and weekend on-call Also part of the role (lighter) Keep a simple risk register and GRC documentation up to date Share security updates with the team and run awareness training Watch emerging AI threats (prompt injection, jailbreaks, content filter bypass) and incidents at our AI providers Your Qualifications Must-haves 2+ years of hands-on security experience Hands-on AppSec, not compliance only: you review code regularly and can walk us through a real vulnerability you found and fixed Audits and pentests: you’ve coordinated an external audit or pentest and followed the findings through to fixes Engineering workflows: you ship code with Git/GitHub, script in Python or Bash, and have recent hands-on work on a modern web stack (e.g. Rails, Node; GCP, Heroku or similar) Ownership with little support: you’ve been the sole or lead security person, or owned a security area on your own. You’ve reviewed code or tested systems every week in the last 2 years, and you explain risk clearly to non-technical people AI in your daily work: you use AI tools every day in your security work A hacker mindset: You love breaking things to make them safer, and security isn’t only your job: you do it for fun too, through bug bounties, CTFs, research, write-ups or your own tools. Nice-to-haves ⭐ AI/LLM security testing (prompt injection, jailbreaking): a strong plus Experience at an AI company or a scale-up GRC awareness Familiarity with MDM and access management Soft Skills 🗣 Strong communication & collaborative skills (perfectly fluent in English) 🧢 Goal-orientated, ownership and commitment ⚡️ Doer mindset - we are moving fast and we need people who can find the right balance between executing, planning and strategy 🧢 Humble - willing to learn, open to feedback 🍭 #NSFW - you are comfortable working in an environment with products that are based on uncensored models and content Why EverAI? 📈 Exponential Growth : From 50M users in 2 years, to 100M next — and 500M beyond 🚀 Track Record of Category-Creating Innovation : We consistently launch world-first AI applications — setting the pace, not following it 🌍 Global Impact : Top-tier user growth, real-world adoption, and cultural relevance 🧠 Proven Leadership : A senior team that’s launched, scaled, and exited & IPO’d multiple scale ups — now fully focused on reshaping AI companionship 👥 Elite Remote Team : 100% remote and built to win — world-class talent from Tier 1 tech companies , with a culture of ownership, velocity, and radical creativity 🛡️ Ethical Core : Our AI ecosystem is governed by EverGuard, our proprietary AI moderation technology , ensuring responsible development at scale What We Offer ✍️ Contract Type: We prefer B2B, but we’re flexible, what matters is long-term commitment and impact 📍 Work From Anywhere: Fully remote. Choose the environment where you do your best work 🏝️ Paid Time Off: 4 weeks (20 working days) of PTO per year to rech