Security Engineer (Remote - Germany)

Free resume; Deutschland; Remote; EUR 90.000 - 120.000; Vollzeit

Benefits dieser Stelle

Fully remote

4 weeks PTO

Annual gathering

Health stipend

Zusammenfassung

EverAI is building the future of AI companionship with a fast-growing platform serving millions of users. As a Security Engineer, you will own application security end-to-end, review code, drive fixes, and coordinate external audits.

You will work with AI-centric threats, including prompt injection, and use AI tools daily to enhance security across the stack. You will report to the CTO and Co-Founder, own security direction, and communicate risk in plain language to technical and non-technical

Qualifikationen

• 2+ years of hands-on security experience with AppSec focus.
• Ability to review code and explain vulnerabilities and fixes.
• Coordinated external audits or pentests and followed through to remediation.
• Ship code with Git/GitHub; script in Python or Bash; experience with modern web stacks.

Aufgaben

• Review code weekly to catch vulnerabilities before deployment.
• Prioritize and drive fixes across the stack for real issues.
• Coordinate external security audits and pentests.
• Automate security tasks and build scalable tools.
• Own security end-to-end with minimal support and communicate risk clearly.
• Handle security alerts and occasional night/weekend on-call.
• Maintain risk registers and update GRC docs, plus awareness training.

Kenntnisse

Hands-on AppSec

Code review

Vulnerability fixing

Security ownership

AI security tooling

Security audits

On-call experience

Communication

Tools

Git/GitHub

Python

Bash

Rails

Node.js

GCP

Heroku

Jobbeschreibung

Job Description

Our Vision & Products

EverAI — Building the Future of AI Companionship

One of the Top 15 Largest & Fastest-Growing AI Companies in the World

50 Million Users in 2 years — Help Us Reach 100M first, 500M next

At EverAI, we’re shaping what it means to connect with AI. With 50 million users and counting, we're not just building products — we're creating entirely new categories.

Our flagship product is the world’s largest AI companionship platform, redefining relationships for millions. It is governed by our proprietary moderation system, EverGuard — an internal AI designed to ensure everything we build is safe, ethical, and human-first.

And we’re only just getting started!

Our Team

We are an enthusiastic, passionate and hardworking team of ≈ 100 people. Our founding team has strong entrepreneurial experience building and scaling web products from 0 to IPO.

10+ years in Tech Executive Leadership

Co-Founder Mad Paws Holdings (from 0 to IPO)

10+ years as CTO / COO (web2/web3), 3 years in AI/LLM

Serial-entrepreneur: MTK Digital (exited / 0->$20m revenue) and Zipchat (AI Chatbot for E-commerce brands)

8+ years in Customer Acquisition & E-commerce Growth

Serial-entrepreneur: Curatible (sold to Blackstone) and MTK Digital (exited / 0->$20m revenue)

25+ years in Finance, Strategy, M&A

Ex-CFO/M&A @Curatible (exited to Blackstone)

Ex-President of the Board @SotremoSA (exited)

Your Role

As a Security Engineer, you’ll own application security for a fast-growing AI companionship platform. This is a hands‑on AppSec role: you’ll review code, find real vulnerabilities and drive fixes across the stack. You’ll be the main security person in the company, reporting directly to our CTO and Co-Founder. You’ll set direction yourself and explain risk clearly to non‑security colleagues. Our product includes AI‑generated content, including NSFW content, and you’ll also keep an eye on AI‑specific threats like prompt injection. Real ownership from day one.

This isn’t an infrastructure, networking or DevSecOps role: we’re looking for application security depth.

Key Responsibilities

Application security (the core of the role)

Review code every week to catch vulnerabilities before they ship

Find, prioritize and drive fixes for real vulnerabilities across the stack, not surface‑level issues

Audits and pentests

Coordinate external security audits and penetration tests

Challenge findings where needed, and follow them through to fixes

Engineering and automation

Automate security work and build the tools you need to scale it

Use AI tools daily in your security work: code review, pentests and scripting

Ownership and communication

Own security end to end with little support, and decide what matters most

Explain technical risk in plain words to the team and leadership

Cover security alerts, including occasional night and weekend on‑call

Also part of the role (lighter)

Keep a simple risk register and GRC documentation up to date

Share security updates with the team and run awareness training

Watch emerging AI threats (prompt injection, jailbreaks, content filter bypass) and incidents at our AI providers

Your Qualifications

Must-haves

2+ years of hands‑on security experience

Hands‑on AppSec, not compliance only: you review code regularly and can walk us through a real vulnerability you found and fixed

Audits and pentests: you’ve coordinated an external audit or pentest and followed the findings through to fixes

Engineering workflows: you ship code with Git/GitHub, script in Python or Bash, and have recent hands‑on work on a modern web stack (e.g. Rails, Node; GCP, Heroku or similar)

Ownership with little support: you’ve been the sole or lead security person, or owned a security area on your own. You’ve reviewed code or tested systems every week in the last 2 years, and you explain risk clearly to non‑technical people

AI in your daily work: you use AI tools every day in your security work

A hacker mindset: You love breaking things to make them safer, and security isn’t only your job: you do it for fun too, through bug bounties, CTFs, research, write‑ups or your own tools.

Nice‑to‑haves

AI/LLM security testing (prompt injection, jailbreaking): a strong plus

Experience at an AI company or a scale‑up

Familiarity with MDM and access management

Soft Skills

Strong communication & collaborative skills (perfectly fluent in English)

Goal‑orientated, ownership and commitment

Doer mindset - we are moving fast and we need people who can find the right balance between executing, planning and strategy

Humble - willing to learn, open to feedback

you are comfortable working in an environment with products that are based on uncensored models and content

Why EverAI?

Exponential Growth: From 50M users in 2 years, to 100M next — and 500M beyond

Track Record of Category‑Creating Innovation: We consistently launch world‑first AI applications — setting the pace, not following it

Global Impact: Top‑tier user growth, real‑world adoption, and cultural relevance

Proven Leadership: A senior team that’s launched, scaled, and exited & IPO’d multiple scale ups — now fully focused on reshaping AI companionship

Elite Remote Team: 100% remote and built to win — world‑class talent from Tier 1 tech companies, with a culture of ownership, velocity, and radical creativity

Ethical Core: Our AI ecosystem is governed by EverGuard, our proprietary AI moderation technology, ensuring responsible development at scale

What We Offer

Contract Type: We prefer B2B, but we’re flexible, what matters is long‑term commitment and impact

Work From Anywhere: Fully remote. Choose the environment where you do your best work

Paid Time Off: 4 weeks (20 working days) of PTO per year to recharge and reset

Annual Gathering: A yearly in‑person meetup to connect, brainstorm, and celebrate wins together

Health & Wellness Support: Monthly allowance of100 USD for health insurance expenses & access to unlimited 1:1 sessions with psychologists and lifestyle experts through OpenUp (also available to up to three of your family members)

Co-Working Space