Remote Application Security Engineer – AI Platform

EverAI; Finland; Remote; EUR 90,000 - 130,000; Full time

Benefits offered by this job

Fully remote

4 weeks PTO

Learning budget

Health & wellness support

Equipment budget

Job summary

EverAI, a fully remote AI company redefining companionship, seeks a Security Engineer to own application security for its fast-growing platform. You will review code weekly, drive fixes, and report to our CTO, shaping risk discussions with non-security colleagues.

This role focuses on AppSec, not infra, with responsibilities including audits, pentests, automation, and on-call coverage. You will apply AI tools in security work and help defend against prompts and content risks.

Qualifications

• 2+ years of hands-on security experience
• Hands-on AppSec, not just compliance: show a real vulnerability you found and fixed
• Audits and pentests: coordinated external assessment and followed through to fixes
• Engineering workflows: Git/GitHub, scripting in Python or Bash, modern web stack (Rails, Node)
• Ownership with little support: led security areas and communicated risk clearly
• AI in daily work: use AI tools in security tasks
• Familiarity with AI threats (prompt injection, jailbreaks) and content safety

Responsibilities

• Review code weekly to catch vulnerabilities before shipping
• Prioritize and drive fixes across the stack
• Coordinate external security audits and pentests
• Automate security workflows and build scalable tooling
• Use AI tools in security tasks (code review, pentests, scripting)
• Own security end-to-end and communicate risk to non-technical teammates
• Manage security alerts and occasional on-call duties
• Maintain simple risk registers and update GRC docs
• Share security updates and run awareness training

Skills

AppSec depth

Code review

Penetration testing

Python/Bash scripting

Git/GitHub workflows

AI security

Communications

Tools

GitHub

OWASP ZAP

Cloud platforms (GCP/Heroku)

Job description

EverAI, a fully remote AI company redefining companionship, seeks a Security Engineer to own application security for its fast-growing platform. You will review code weekly, drive fixes, and report to our CTO, shaping risk discussions with non-security colleagues.

This role focuses on AppSec, not infra, with responsibilities including audits, pentests, automation, and on-call coverage. You will apply AI tools in security work and help defend against prompts and content risks.