Security Engineer - Remote AI Platform

Devconnectplatform; Polska; Hybrid; PLN 284,000 - 371,000; Full time

Benefits offered by this job

4 weeks PTO

Health insurance allowance

Learning budget

Co-working budget

Company laptop

Job summary

EverAI in Poland is seeking a Security Engineer for a fully remote role. You will own application security, risk & compliance, and awareness as our AI companionship platform scales, including monitoring for AI-specific threats.

You’ll perform code reviews, coordinate audits, maintain the risk register, run phishing simulations, and help educate the company on security best practices, with strong ownership and rapid delivery.

Qualifications

• Solid experience in application security (code reviews and vulnerability management).
• Experience coordinating or conducting penetration tests and security audits.
• Familiar with Git/GitHub workflows and scripting/automation.
• Interest or knowledge in AI/LLM security concepts is a plus.

Responsibilities

• Perform weekly code reviews to catch vulnerabilities before they ship.
• Track, prioritize, and remediate security vulnerabilities across the stack.
• Coordinate external security audits and penetration tests; follow up on findings.
• Maintain and evolve the risk register; support audit follow-up and GRC docs.
• Communicate security threats and updates to the team; run phishing simulations.
• Monitor security channels and alerts; provide weekend coverage.
• Set up and secure new employee devices; manage access provisioning/deprovisioning.
• Monitor AI-specific threats and track incidents disclosed by third-party providers.

Skills

Application security

Vulnerability management

Penetration testing

Security audits

Git/GitHub

Scripting/automation

AI/LLM security

Job description

EverAI in Poland is seeking a Security Engineer for a fully remote role. You will own application security, risk & compliance, and awareness as our AI companionship platform scales, including monitoring for AI-specific threats.

You’ll perform code reviews, coordinate audits, maintain the risk register, run phishing simulations, and help educate the company on security best practices, with strong ownership and rapid delivery.