Security Engineer

Our Vision & Products EverAI — Building the Future of AI Companionship One of the Top 15 Largest & Fastest-Growing AI Companies in the World 50 Million Users in 2 years — Help Us Reach 100M first, 500M next At EverAI, we’re shaping what it means to connect with AI. With 50 million users and counting, we're not just building products — we're creating entirely new categories. Our flagship product is the world’s largest AI companionship platform, redefining relationships for millions. It is governed by our proprietary moderation system, EverGuard — an internal AI designed to ensure everything we build is safe, ethical, and human-first. And we’re only just getting started Our Team We are an enthusiastic, passionate and hardworking team of ≈ 100 people. Our founding team has strong entrepreneurial experience building and scaling web products from 0 to IPO. Alexis Soulopoulos [CEO]
• 10+ years in Tech Executive Leadership
• Co-Founder Mad Paws Holdings (from 0 to IPO)
• Forbes 30 under 30 + Deloitte TechFast50 ’22 & ’23 Michael Monin [Co-founder & CTO]
• 10+ years as CTO / COO (web2/web3), 3 years in AI/LLM
• Serial-entrepreneur: MTK Digital (exited / 0->$20m revenue) and Zipchat (AI Chatbot for E-commerce brands) Thomas Lacroix [Co-founder & CMO]
• 8+ years in Customer Acquisition & E-commerce Growth
• Serial-entrepreneur: Curatible (sold to Blackstone) and MTK Digital (exited / 0->$20m revenue) Maruša Fasano [CFO/Legal]
• 25+ years in Finance, Strategy, M&A
• Ex-CFO/M&A @Curatible (exited to Blackstone)
• Ex-President of the Board @SotremoSA (exited)
• Co-founder/CFO @SoftOne (exited) Your Role As a Security Engineer, you’ll own application security for a fast-growing AI companionship platform. This is a hands-on AppSec role: you’ll review code, find real vulnerabilities and drive fixes across the stack. You’ll be the main security person in the company, reporting directly to our CTO and Co-Founder. You’ll set direction yourself and explain risk clearly to non-security colleagues. Our product includes AI-generated content, including NSFW content, and you’ll also keep an eye on AI-specific threats like prompt injection. Real ownership from day one. This isn’t an infrastructure, networking or DevSecOps role: we’re looking for application security depth.

Key Responsibilities
Application security (the core of the role)
- Review code every week to catch vulnerabilities before they ship
- Find, prioritize and drive fixes for real vulnerabilities across the stack, not surface-level issues Audits and pentests
- Coordinate external security audits and penetration tests
- Challenge findings where needed, and follow them through to fixes Engineering and automation
- Automate security work and build the tools you need to scale it
- Use AI tools daily in your security work: code review, pentests and scripting Ownership and communication
- Own security end to end with little support, and decide what matters most
- Explain technical risk in plain words to the team and leadership
- Cover security alerts, including occasional night and weekend on-call Also part of the role (lighter)
- Keep a simple risk register and GRC documentation up to date
- Share security updates with the team and run awareness training
- Watch emerging AI threats (prompt injection, jailbreaks, content filter bypass) and incidents at our AI providers Your Qualifications Must-haves
- 2+ years of hands-on security experience
- Hands-on AppSec, not compliance only: you review code regularly and can walk us through a real vulnerability you found and fixed
- Audits and pentests: you’ve coordinated an external audit or pentest and followed the findings through to fixes
- Engineering workflows: you ship code with Git/GitHub, script in Python or Bash, and have recent hands-on work on a modern web stack (e.g. Rails, Node; GCP, Heroku or similar)
- Ownership with little support: you’ve been the sole or lead security person, or owned a security area on your own. You’ve reviewed code or tested systems every week in the last 2 years, and you explain risk clearly to non-technical people
- AI in your daily work: you use AI tools every day in your security work
- A hacker mindset: You love breaking things to make them safer, and security isn’t only your job: you do it for fun too, through bug bounties, CTFs, research, write-ups or your own tools. Nice-to-haves
- AI/LLM security testing (prompt injection, jailbreaking): a strong plus
- Experience at an AI company or a scale-up
- GRC awareness
- Familiarity with MDM and access management Soft Skills Strong communication & collaborative skills (perfectly fluent in English) Goal-orientated, ownership and commitment Doer mindset
- we are moving fast and we need people who can find the right balance between executing, planning and strategy Humble
- willing to learn, open to feedback #NSFW
- you are comfortable working in an environment with products that are bas