Remote AppSec Engineer — Lead Security for AI Platform

EverAI; Polska; À distance; PLN 286 000 - 505 000; Plein temps

Avantages offerts par ce poste

Fully remote

4 weeks PTO

Annual gathering

Health & wellness budget

Co-working space budget

Learning budget

Company laptop

Résumé du poste

EverAI is seeking a Security Engineer to own application security for a fast-growing AI companionship platform. This hands-on role involves reviewing code, identifying real vulnerabilities, and driving fixes across the stack.

You will report to the CTO, set direction, and communicate risk clearly to non-technical colleagues. The role touches AI-generated content and related threats, with ownership from day one.

Qualifications

• Hands-on AppSec experience with code review and vulnerability fixing.
• Coordinated external security audits or pentests and followed findings to fixes.
• Scripting in Python or Bash and modern web stack knowledge (Rails/Node).
• Able to ship code and explain risk to non-technical teammates.
• Experience using AI tools in security work and habit of continuous learning.

Responsabilités

• Review code weekly to catch vulnerabilities before shipping.
• Coordinate external security audits and penetration tests.
• Automate security tasks and build scalable tools.
• Use AI tools in daily security work for code review and testing.
• Own security end-to-end and explain risk to leadership.
• Handle security alerts, including occasional on-call.
• Maintain risk register and up-to-date GRC docs.
• Monitor emerging AI threats like prompt injection and jailbreaking.

Connaissances

Hands-on AppSec

Code review

External audits

Python Bash scripting

Git/GitHub usage

AI/LLM security

Security communication

Outils

GitHub

Python

Bash

Description du poste

EverAI is seeking a Security Engineer to own application security for a fast-growing AI companionship platform. This hands-on role involves reviewing code, identifying real vulnerabilities, and driving fixes across the stack.

You will report to the CTO, set direction, and communicate risk clearly to non-technical colleagues. The role touches AI-generated content and related threats, with ownership from day one.