Remote AppSec Engineer for AI Security & Risk

EverAI; United States; Remote; USD 120.000 - 180.000; Vollzeit

Benefits dieser Stelle

Paid Time Off

Learning Budget

Company Laptop & Equipment

Annual Gathering

Remote-first culture

Zusammenfassung

EverAI is a fully remote company shaping AI companionship at scale. We seek a Security Engineer to own application security for a fast-growing platform. You’ll review code, find vulnerabilities, drive fixes, and report to the CTO.

You’ll manage risk and explain it clearly to non-technical teams, including AI-specific threats and NSFW content concerns. You’ll coordinate audits, automate security workflows, and maintain a risk register.

Qualifikationen

• 2+ years of hands-on security experience.
• Hands-on AppSec, not just compliance: can walk through a real vulnerability found and fixed.
• Audits and pentests: coordinated external audit or pentest and followed findings to fixes.
• Engineering workflows: ship code with Git/GitHub, script in Python or Bash, modern web stack (Rails/Node), GCP/Heroku.
• Ownership with little support: led security area and can explain risk to non-technical people.
• AI in daily work: use AI tools daily in security work.
• Hacker mindset: enjoys breaking things to improve safety; participates in bug bounties/CTFs/research.

Aufgaben

• Review code weekly to catch vulnerabilities before they ship.
• Prioritize and drive fixes for real vulnerabilities across the stack.
• Audits and pentests; coordinate external security audits and tests.
• Automate security work and build tools to scale security.
• Explain technical risk in plain words to the team and leadership.
• Cover security alerts, including on-call nights/weekends.
• Maintain risk register and GRC documentation; share updates and run awareness training.
• Watch emerging AI threats (prompt injection, jailbreaks) and incidents with AI providers.

Kenntnisse

AppSec

Code review

Penetration tests

Git/GitHub

Python

Bash

Rails

Node.js

AI usage

Tools

GCP

Heroku

Jobbeschreibung

EverAI is a fully remote company shaping AI companionship at scale. We seek a Security Engineer to own application security for a fast-growing platform. You’ll review code, find vulnerabilities, drive fixes, and report to the CTO.

You’ll manage risk and explain it clearly to non-technical teams, including AI-specific threats and NSFW content concerns. You’ll coordinate audits, automate security workflows, and maintain a risk register.