Remote AppSec Engineer for AI Platform

EverAI; España; Remote; EUR 80,000 - 125,000; Full time

Benefits offered by this job

Fully remote work

Learning budget

Health & wellbeing benefits

Annual gathering

Equipment budget

AI tools access

Job summary

EverAI seeks a Security Engineer to own application security for a fast-growing AI companionship platform. This hands-on role involves reviewing code, identifying vulnerabilities, and driving fixes across the stack.

You will report to the CTO/Co-Founder, set direction, and communicate risk clearly to non-security colleagues, including monitoring for NSFW content and AI-specific threats. It’s a hands-on AppSec role, not DevSecOps, with ownership from day one.

Qualifications

• 2+ years of hands-on security experience
• Hands-on AppSec, not just compliance; ability to walk through a real vulnerability
• Audits and pentests: coordinate external audits and follow-up fixes
• Engineering workflows: ship code with Git, script in Python or Bash, modern web stack experience
• Ownership with little support: have led security areas and explained risk to non-technical people
• AI in daily work: use AI tools in security work
• A hacker mindset: enjoy breaking things to improve safety through bug bounties, CTFs, or own tools

Responsibilities

• Review code weekly to catch vulnerabilities before they ship
• Find, prioritize and drive fixes for real vulnerabilities across the stack
• Coordinate external security audits and penetration tests
• Automate security work and build tools to scale
• Explain technical risk in plain terms to team and leadership
• Cover security alerts and on-call during nights/weekends
• Maintain risk register and GRC documentation
• Share security updates with the team and run awareness trainings

Skills

Hands-on security

Audits & pentests

Git/GitHub

Python/Bash

Web stack (Rails/Node)

AI tools in security

Tools

GitHub

Python

Bash

Rails

Node.js

GCP/Heroku

Job description

EverAI seeks a Security Engineer to own application security for a fast-growing AI companionship platform. This hands-on role involves reviewing code, identifying vulnerabilities, and driving fixes across the stack.

You will report to the CTO/Co-Founder, set direction, and communicate risk clearly to non-security colleagues, including monitoring for NSFW content and AI-specific threats. It’s a hands-on AppSec role, not DevSecOps, with ownership from day one.