Remote AppSec Engineer — Own End-to-End AI Security

EverAI Limited; Polska; Hybride; PLN 180 000 - 320 000; Plein temps

Avantages offerts par ce poste

4 weeks PTO per year

Annual in-person gathering

Health & wellness allowance

Co-working space budget

Learning budget

Company laptop & equipment

AI tools access

Résumé du poste

EverAI Limited is urgently seeking a Security Engineer to own application security for a fast-growing AI companionship platform. You will review code, identify vulnerabilities, and drive fixes across the stack, reporting to the CTO. You’ll handle AI-specific threats like prompt injection and be the main security voice in the company.

This is a hands-on AppSec role focused on security depth rather than infrastructure, with occasional on-call and direct risk communication to leadership.

Qualifications

• 2+ years hands-on security experience.
• Hands-on AppSec, not compliance only: you review code regularly and can walk us through a real vulnerability you found and fixed.
• Audits and pentests: you’ve coordinated an external audit or pentest and followed the findings through to fixes.
• Engineering workflows: you ship code with Git/GitHub, script in Python or Bash, and have recent hands-on work on a modern web stack (e.g. Rails, Node; GCP, Heroku or similar).
• Ownership with little support: you’ve been the sole or lead security person, or owned a security area on your own. You’ve reviewed code or tested systems every week in the last 2 years, and you explain risk clearly to non-technical people.
• AI in your daily work: you use AI tools every day in your security work.
• A hacker mindset: You love breaking things to make them safer, and security isn’t only your job: you do it for fun too, through bug bounties, CTFs, research, write-ups or your own tools.

Responsabilités

• Review code weekly to catch vulnerabilities before they ship.
• Find, prioritize and drive fixes for real vulnerabilities across the stack.
• Coordinate external security audits and penetration tests and follow through to fixes.
• Automate security work and build tools to scale it, using AI tools daily in security tasks.
• Own security end-to-end with little support and explain risk clearly to the team and leadership.
• Cover security alerts, including occasional night and weekend on-call.

Connaissances

2+ years

AppSec

Audits & pentests

Git/GitHub

Python

Bash

Rails

Node

GCP

Heroku

AI tools in security

Outils

Git/GitHub

Python

Bash

Rails

Node

GCP

Heroku

Description du poste

EverAI Limited is urgently seeking a Security Engineer to own application security for a fast-growing AI companionship platform. You will review code, identify vulnerabilities, and drive fixes across the stack, reporting to the CTO. You’ll handle AI-specific threats like prompt injection and be the main security voice in the company.

This is a hands-on AppSec role focused on security depth rather than infrastructure, with occasional on-call and direct risk communication to leadership.