Senior AppSec Engineer – AI Platform

EverAI; United States; Remote; USD 120.000 - 180.000; Vollzeit

Benefits dieser Stelle

PTO 4 weeks

Annual gathering

Health & wellness budget

Co-working space budget

Learning budget

Company laptop

AI tools access

Zusammenfassung

EverAI in the United States is seeking a hands-on Security Engineer to own application security for its rapid-growth AI companionship platform. You’ll review code, hunt real vulnerabilities, and drive fixes across the stack, reporting to the CTO.

You’ll lead audits, coordinate external tests, automate security tooling, and explain risk in plain language to non-technical teammates. The role includes on-call duties and a hacker mindset to stay ahead of threats.

Qualifikationen

• 2+ years of hands-on security experience.
• Hands-on AppSec; can walk through a real vulnerability you fixed.
• Coordinated an external audit or pentest and remediated findings.
• Git/GitHub workflow; scripting in Python or Bash; modern web stack (Rails/Node, GCP/Heroku).
• Ownership with little support; weekly code reviews.
• AI in daily security work.
• Hacker mindset; enjoys breaking things to make them safer; bug bounties/CTFs/research/tools.

Aufgaben

• Review code weekly to catch vulnerabilities before they ship.
• Prioritize and fix real vulnerabilities across the stack.
• Audits and pentests; coordinate external audits.
• Automate security work and build tooling.
• Use AI tools daily in security work.
• Explain risk to non-technical teammates.
• Handle security alerts including night/weekend on-call.
• Maintain risk register and GRC docs.
• Share security updates and run awareness training.
• Watch emerging AI threats like prompt injection and jailbreaks.

Kenntnisse

AppSec

Code review

Vulnerability mgmt

External audits

Git/GitHub

Python or Bash

Security ownership

AI in security

Communication

Tools

GCP

Heroku

Rails

Node

Jobbeschreibung

EverAI in the United States is seeking a hands-on Security Engineer to own application security for its rapid-growth AI companionship platform. You’ll review code, hunt real vulnerabilities, and drive fixes across the stack, reporting to the CTO.

You’ll lead audits, coordinate external tests, automate security tooling, and explain risk in plain language to non-technical teammates. The role includes on-call duties and a hacker mindset to stay ahead of threats.