Lead Security Engineer, Remote AI Platform

EverAI; United States; Remote; USD 120.000 - 180.000; Vollzeit

Zusammenfassung

EverAI is hiring a Security Engineer to own application security for a fast-growing AI companionship platform. You’ll review code, identify real vulnerabilities, and drive fixes across the stack. You’ll be the primary security expert reporting to the CTO, guiding risk communication to non‑security colleagues.

You’ll address AI-specific threats like prompt injection and maintain a risk register, with on-call coverage and continuous security improvements. This role is fully remote and global.

Qualifikationen

• Hands-on AppSec, not compliance only: you review code regularly and can walk us through a real vulnerability you found and fixed.
• Audits and pentests: you’ve coordinated an external audit or pentest and followed the findings through to fixes.
• Engineering workflows: you ship code with Git/GitHub, script in Python or Bash, and have recent hands‑on work on a modern web stack (Rails, Node; GCP, Heroku).
• Ownership with little support: you’ve been the sole or lead security person, or owned a security area on your own.

Aufgaben

• Review code every week to catch vulnerabilities before they ship
• Find, prioritize and drive fixes for real vulnerabilities across the stack
• Audits and pentests
• Coordinate external security audits and penetration tests
• Challenge findings where needed, and follow them through to fixes
• Own security end to end with little support and explain risk clearly

Kenntnisse

Code review

Vulnerability fixes

Audits & pentests

Security tooling

AI security

Communication

Tools

Git/GitHub

Python

Bash

Rails/Node

GCP/Heroku

Jobbeschreibung

EverAI is hiring a Security Engineer to own application security for a fast-growing AI companionship platform. You’ll review code, identify real vulnerabilities, and drive fixes across the stack. You’ll be the primary security expert reporting to the CTO, guiding risk communication to non‑security colleagues.

You’ll address AI-specific threats like prompt injection and maintain a risk register, with on-call coverage and continuous security improvements. This role is fully remote and global.