Security Engineer (Remote - Spain)

EverAI; España; Remote; EUR 80,000 - 125,000; Full time

Benefits offered by this job

Fully remote work

Learning budget

Health & wellbeing benefits

Annual gathering

Equipment budget

AI tools access

Job summary

EverAI seeks a Security Engineer to own application security for a fast-growing AI companionship platform. This hands-on role involves reviewing code, identifying vulnerabilities, and driving fixes across the stack.

You will report to the CTO/Co-Founder, set direction, and communicate risk clearly to non-security colleagues, including monitoring for NSFW content and AI-specific threats. It’s a hands-on AppSec role, not DevSecOps, with ownership from day one.

Qualifications

• 2+ years of hands-on security experience
• Hands-on AppSec, not just compliance; ability to walk through a real vulnerability
• Audits and pentests: coordinate external audits and follow-up fixes
• Engineering workflows: ship code with Git, script in Python or Bash, modern web stack experience
• Ownership with little support: have led security areas and explained risk to non-technical people
• AI in daily work: use AI tools in security work
• A hacker mindset: enjoy breaking things to improve safety through bug bounties, CTFs, or own tools

Responsibilities

• Review code weekly to catch vulnerabilities before they ship
• Find, prioritize and drive fixes for real vulnerabilities across the stack
• Coordinate external security audits and penetration tests
• Automate security work and build tools to scale
• Explain technical risk in plain terms to team and leadership
• Cover security alerts and on-call during nights/weekends
• Maintain risk register and GRC documentation
• Share security updates with the team and run awareness trainings

Skills

Hands-on security

Audits & pentests

Git/GitHub

Python/Bash

Web stack (Rails/Node)

AI tools in security

Tools

GitHub

Python

Bash

Rails

Node.js

GCP/Heroku

Job description

Our Vision & Products

EverAI — Building the Future of AI Companionship

One of the Top 15 Largest & Fastest-Growing AI Companies in the World

50 Million Users in 2 years — Help Us Reach 100M first, 500M next

At EverAI, we’re shaping what it means to connect with AI. With 50 million users and counting, we're not just building products — we're creating entirely new categories.

Our flagship product is the world’s largest AI companionship platform, redefining relationships for millions. It is governed by our proprietary moderation system, EverGuard — an internal AI designed to ensure everything we build is safe, ethical, and human-first.

And we’re only just getting started!

Our Team

We are an enthusiastic, passionate and hardworking team of ≈ 100 people. Our founding team has strong entrepreneurial experience building and scaling web products from 0 to IPO.

Alexis Soulopoulos [CEO]

10+ years in Tech Executive Leadership

Co-Founder Mad Paws Holdings (from 0 to IPO)

Forbes 30 under 30 + Deloitte TechFast50 ’22 & ’23

Michael Monin [Co-founder & CTO]

10+ years as CTO / COO (web2/web3), 3 years in AI/LLM

Serial-entrepreneur: MTK Digital (exited / 0->$20m revenue) and Zipchat (AI Chatbot for E-commerce brands)

Thomas Lacroix [Co-founder & CMO]

8+ years in Customer Acquisition & E-commerce Growth

Serial-entrepreneur: Curatible (sold to Blackstone) and MTK Digital (exited / 0->$20m revenue)

Maruša Fasano [CFO/Legal]

25+ years in Finance, Strategy, M&A

Ex-CFO/M&A @Curatible (exited to Blackstone)

Ex-President of the Board @SotremoSA (exited)

Co-founder/CFO @SoftOne (exited)

Your Role

As a Security Engineer, you’ll own application security for a fast-growing AI companionship platform. This is a hands‑on AppSec role: you’ll review code, find real vulnerabilities and drive fixes across the stack. You’ll be the main security person in the company, reporting directly to our CTO and Co‑Founder. You’ll set direction yourself and explain risk clearly to non‑security colleagues. Our product includes AI‑generated content, including NSFW content, and you’ll also keep an eye on AI‑specific threats like prompt injection. Real ownership from day one.

This isn’t an infrastructure, networking or DevSecOps role: we’re looking for application security depth.

Key Responsibilities

Application security (the core of the role)

• Review code every week to catch vulnerabilities before they ship

• Find, prioritize and drive fixes for real vulnerabilities across the stack, not surface‑level issues

Audits and pentests

• Coordinate external security audits and penetration tests

• Challenge findings where needed, and follow them through to fixes

Engineering and automation

• Automate security work and build the tools you need to scale it

• Use AI tools daily in your security work: code review, pentests and scripting

Ownership and communication

• Own security end to end with little support, and decide what matters most

• Explain technical risk in plain words to the team and leadership

• Cover security alerts, including occasional night and weekend on‑call

Also part of the role (lighter)

• Keep a simple risk register and GRC documentation up to date

• Share security updates with the team and run awareness training

You're Qualifications

Must-haves

• 2+ years of hands‑on security experience

• Hands‑on AppSec, not compliance only: you review code regularly and can walk us through a real vulnerability you found and fixed

• Audits and pentests: you’ve coordinated an external audit or pentest and followed the findings through to fixes

• Engineering workflows: you ship code with Git/GitHub, script in Python or Bash, and have recent hands‑on work on a modern web stack (e.g. Rails, Node; GCP, Heroku or similar)

• Ownership with little support: you’ve been the sole or lead security person, or owned a security area on your own. You’ve reviewed code or tested systems every week in the last 2 years, and you explain risk clearly to non‑technical people

• AI in your daily work: you use AI tools every day in your security work

• A hacker mindset: You love breaking things to make them safer, and security isn’t only your job: you do it for fun too, through bug bounties, CTFs, research, write‑ups or your own tools.

Nice-to-haves

• AI/LLM security testing (prompt injection, jailbreaking): a strong plus

• Experience at an AI company or a scale‑up

• GRC awareness

• Familiarity with MDM and access management

Soft Skills

Strong communication & collaborative skills (perfectly fluent in English)

Goal‑orientated, ownership and commitment

Doer mindset - we are moving fast and we need people who can find the right balance between executing, planning and strategy

Humble - willing to learn, open to feedback

#NSFW - you are comfortable working in an environment with products that are based on uncensored models and content

Why EverAI?

Exponential Growth: From 50M users in 2 years, to 100M next — and 500M beyond

Track Record of Category‑Creating Innovation: We consistently launch world‑first AI applications — setting the pace, not following it

Global Impact: Top‑tier user growth, real‑world adoption, and cultural relevance

Proven Leadership: A senior team that’s launched, scaled, and exited & IPO’d multiple scale ups — now fully focused on reshaping AI companionship

Elite Remote Team: 100% remote and built to win — world‑class talent from Tier 1 tech companies, with a culture of ownership, velocity, and radical creativity

Ethical Core: Our AI ecosystem is governed by EverGuard, our proprietary AI moderation technology, ensuring responsible development at scale

What We Offer

Contract Type: We prefer B2B, but we’re flexible, what matters is long‑term commitment and impact

Work From Anywhere: Fully remote. Choose the environment where you do your best work

Paid Time Off: 4 weeks (20 working days) of PTO per year to recharge and reset

Annual Gathering: A yearly in‑person meetup to connect, brainstorm, and celebrate wins together

Health & Wellness Support: Monthly allowance of100 USD for health insurance expenses & access to unlimited 1:1 sessions with psychologists and lifestyle experts through OpenUp (also available to up to three of your family members)

Co‑Working Space Budget: Work from a co‑working space up to twice per month (35 EUR / 40 USD per visit) to stay inspired and connected

Learning Budget: Dedicated funds to support your professional growth: courses, books, conferences, events, or certifications

Company Laptop & Equipment: Laptop provided + monitor budget up to 250 USD + keyboard/mouse/mic/headphones budget up to 150 USD

AI Tools Access: Premium access to ChatGPT, Hugging Face, Claude Code, and any other tool needed to excel at your job, power your ideas and workflows

Top Tier Talent Is Our Multiplier

We’re a fully remote group of A‑players from Tier 1 tech, led by an exec team who’ve launched, scaled, and exited multiple companies. We move fast, and care deeply about what we build — and who we build it with.

We’re looking for exceptional talent ready to ship & distribute world‑first AI products at scale, fast, and co‑create with us this category‑defining business.

If that’s you — reach out and apply!