Security Engineer

Vor 4 Tagen

Deutschland EverAI Limited Remote Vollzeit 70.000 € - 110.000 € Vertrag

Our Vision & Products

EverAI — Building the Future of AI Companionship

One of the Top 15 Largest & Fastest-Growing AI Companies in the World

50 Million Users in 2 years — Help Us Reach 100M first, 500M next

At EverAI, we’re shaping what it means to connect with AI. With 50 million users and counting, we're not just building products — we're creating entirely new categories.

Our flagship product is the world’s largest AI companionship platform, redefining relationships for millions. It is governed by our proprietary moderation system, EverGuard — an internal AI designed to ensure everything we build is safe, ethical, and human-first.

And we’re only just getting started

Our Team

We are an enthusiastic, passionate and hardworking team of ≈ 100 people. Our founding team has strong entrepreneurial experience building and scaling web products from 0 to IPO.

Alexis Soulopoulos [CEO]

10+ years in Tech Executive Leadership

Co-Founder Mad Paws Holdings (from 0 to IPO)

Forbes 30 under 30 + Deloitte TechFast50 ’22 & ’23

Michael Monin [Co-founder & CTO]

10+ years as CTO / COO (web2/web3), 3 years in AI/LLM

Serial-entrepreneur: MTK Digital (exited / 0->$20m revenue) and Zipchat (AI Chatbot for E-commerce brands)

Thomas Lacroix [Co-founder & CMO]

8+ years in Customer Acquisition & E-commerce Growth

Serial-entrepreneur: Curatible (sold to Blackstone) and MTK Digital (exited / 0->$20m revenue)

Maruša Fasano [CFO/Legal]

25+ years in Finance, Strategy, M&A

Ex-CFO/M&A @Curatible (exited to Blackstone)

Ex-President of the Board @SotremoSA (exited)

Co-founder/CFO @SoftOne (exited)

Your Role

As a Security Engineer, you’ll own application security for a fast-growing AI companionship platform. This is a hands‑on AppSec role: you’ll review code, find real vulnerabilities and drive fixes across the stack. You’ll be the main security person in the company, reporting directly to our CTO and Co-Founder. You’ll set direction yourself and explain risk clearly to non‑security colleagues. Our product includes AI-generated content, including NSFW content, and you’ll also keep an eye on AI‑specific threats like prompt injection. Real ownership from day one.

This isn’t an infrastructure, networking or DevSecOps role: we’re looking for application security depth.

Key Responsibilities

Application security (the core of the role)

  • Review code every week to catch vulnerabilities before they ship

  • Find, prioritize and drive fixes for real vulnerabilities across the stack, not surface‑level issues

Audits and pentests

  • Coordinate external security audits and penetration tests

  • Challenge findings where needed, and follow them through to fixes

Engineering and automation

  • Automate security work and build the tools you need to scale it

  • Use AI tools daily in your security work: code review, pentests and scripting

Ownership and communication

  • Own security end to end with little support, and decide what matters most

  • Explain technical risk in plain words to the team and leadership

  • Cover security alerts, including occasional night and weekend on‑call

Also part of the role (lighter)

  • Keep a simple risk register and GRC documentation up to date

  • Share security updates with the team and run awareness training

  • Watch emerging AI threats (prompt injection, jailbreaks, content filter bypass) and incidents at our AI providers

Your Qualifications

Must-haves

  • 2+ years of hands‑on security experience

  • Hands‑on AppSec, not compliance only: you review code regularly and can walk us through a real vulnerability you found and fixed

  • Audits and pentests: you’ve coordinated an external audit or pentest and followed the findings through to fixes

  • Engineering workflows: you ship code with Git/GitHub, script in Python or Bash, and have recent hands‑on work on a modern web stack (e.g. Rails, Node; GCP, Heroku or similar)

  • Ownership with little support: you’ve been the sole or lead security person, or owned a security area on your own. You’ve reviewed code or tested systems every week in the last 2 years, and you explain risk clearly to non‑technical people

  • AI in your daily work: you use AI tools every day in your security work

  • A hacker mindset: You love breaking things to make them safer, and security isn’t only your job: you do it for fun too, through bug bounties, CTFs, research, write‑ups or your