Security Engineer (Full Remote - Europe)

Stack

Responsibilities

• ▹Perform weekly code reviews to catch vulnerabilities before they ship
• ▹Track, prioritize, and drive remediation of security vulnerabilities across the stack
• ▹Coordinate external security audits and penetration tests, and follow through on findings
• ▹Maintain and evolve the risk register, mapping company services and prioritizing exposure
• ▹Support audit follow-up and keep GRC documentation up to date
• ▹Communicate new threats to the team, document findings, and broadcast security updates company-wide
• ▹Run phishing simulations and security training (via Riot)
• ▹Own monitoring of security channels and alerts, including weekend coverage
• ▹Set up and secure new employee devices (MDM), manage access provisioning/deprovisioning
• ▹Monitor emerging attack techniques targeting generative AI (prompt injection, jailbreaks, content filter bypass)
• ▹Track security incidents and vulnerabilities disclosed by third-party AI providers

Requirements

• ▹Solid experience in application security (code review, vulnerability management)

About the company

EverAI is building one of the world's largest AI companionship platforms, with 50 million users and a team of around 100 people. The founding team has backgrounds at companies like Twilio, Wise, and Skype, and the company runs its own EverGuard moderation system to keep content safe and ethical.