Security Engineer

Smartscale; United States; Remote; USD 120,000 - 180,000; Full time

Job summary

Smartscale is seeking a Security Engineer to own protection of the product, users, and collaborators as we scale a fast-growing AI companionship platform. You will work hands-on across application security, risk & compliance, and security awareness, including monitoring NSFW content risks.

You will lead code reviews, drive remediation, coordinate audits, and improve our security program with a doer mindset and clear communication in English.

Qualifications

• Experience in application security, vulnerability management.
• Coordination or execution of penetration tests and security audits.
• Proficiency in coding and scripting with Git/GitHub workflows.
• Excellent written and verbal English communication.
• Ownership mindset with ability to balance execution and strategy.
• Comfort with NSFW content in a product security context.

Responsibilities

• Perform weekly code reviews to catch vulnerabilities before they ship.
• Track, prioritize, and drive remediation of security vulnerabilities across the stack.
• Coordinate external security audits and penetration tests, and follow through on findings.
• Maintain and evolve risk register and GRC documentation.
• Communicate new threats and security updates to the team.
• Monitor security channels and alerts, including weekend coverage.

Skills

Application security

Vulnerability management

Scripting/automation

Communication

Ownership mindset

NSFW content familiarity

Tools

Git / GitHub workflows

Job description

As a Security Engineer with our client, you will take ownership of protecting the product, users, and collaborators as the company scales a fast-growing AI companionship platform. You'll work hands-on across application security, risk & compliance, and security awareness, plus keeping an eye on AI-specific threats. Given the nature of the product (AI-generated content, including NSFW) you'll play a key role in keeping both systems and users safe, with real ownership from day one.

• Perform weekly code reviews to catch vulnerabilities before they ship
• Track, prioritize, and drive remediation of security vulnerabilities across the stack
• Coordinate external security audits and penetration tests, and follow through on findings
• Maintain and evolve our risk register, mapping all company services and prioritizing what's exposed
• Support audit follow-up and keep GRC documentation up to date
• Communicate new threats to the team, document findings, and broadcast security updates company-wide
• Run phishing simulations and security training (via Riot)
• Own the monitoring of security channels and alerts, including weekend coverage, so nothing goes unanswered
• Set up and secure new employee devices (MDM), manage access provisioning/deprovisioning
• Keep an eye on emerging attack techniques targeting generative AI (prompt injection, jailbreaks, content filter bypass)
• Track security incidents and vulnerabilities disclosed by the third-party AI providers we rely on

Application Security Experience

Solid experience in application security (code review, vulnerability management)

Security Audit/Penetration Testing Experience

coordinating or conducting penetration tests / security audits

Coding & Scripting

Comfortable shipping code and working with Git/GitHub workflows; Scripting/automation skills

Communication & Collaboration

Strong communication & collaborative skills (perfectly fluent in English)

Ownership & Doer Mindset

Goal-orientated, ownership and commitment; Doer mindset - balance between executing, planning and strategy

Comfort with NSFW Content

Comfortable working in an environment with products that are based on uncensored models and content