Security Engineer (Full Remote - Germany)

Our Vision & Products🚀 EverAI — Building the Future of AI Companionship One of the Top 15 Largest & Fastest-Growing AI Companies in the World 50 Million Users in 2 years — Help Us Reach 100M first, 500M next At EverAI, we’re shaping what it means to connect with AI. With 50 million users and counting, we're not just building products — we're creating entirely new categories. Our flagship product is the world’s largest AI companionship platform, redefining relationships for millions. It is governed by our proprietary moderation system, EverGuard — an internal AI designed to ensure everything we build is safe, ethical, and human-first. And we’re only just getting started! Our TeamWe are an enthusiastic, passionate and hardworking team of ≈ 100 people. Our founding team has strong entrepreneurial experience building and scaling web products from 0 to IPO. Alexis Soulopoulos [CEO] • 10+ years in Tech Executive Leadership • Co-Founder Mad Paws Holdings (from 0 to IPO) • Forbes 30 under 30 + Deloitte TechFast50 ’22 & ‘23 Michael Monin [Co-founder & CTO] • 10+ years as CTO / COO (web2/web3), 3 years in AI/LLM • Serial-entrepreneur: MTK Digital (exited / 0->$20m revenue) and Zipchat (AI Chatbot for E-commerce brands) Thomas Lacroix [Co-founder & CMO] • 8+ years in Customer Acquisition & E-commerce Growth • Serial-entrepreneur: Curatible (sold to Blackstone) and MTK Digital (exited / 0->$20m revenue) Maruša Fasano [CFO/Legal] • 25+ years in Finance, Strategy, M&A • Ex-CFO/M&A @Curatible (exited to Blackstone) • Ex-President of the Board @SotremoSA (exited) • Co-founder/CFO @SoftOne (exited) Your RoleAs a Security Engineer, you will take ownership of protecting our product, our users, and our collaborators as we scale a fast-growing AI companionship platform. You'll work hands-on across application security, risk & compliance, and security awareness (plus keeping an eye on AI-specific threats as our product line evolves). Given the nature of our product (AI-generated content, including NSFW) you'll play a key role in keeping both our systems and our users safe, with real ownership from day one. This is a hands-on role reporting directly to the Security Lead, with regular check-ins on priorities. Key Responsibilities Application SecurityPerform weekly code reviews to catch vulnerabilities before they ship Track, prioritize, and drive remediation of security vulnerabilities across the stack Coordinate external security audits and penetration tests, and follow through on findings Governance, Risk & Compliance (GRC)Maintain and evolve our risk register, mapping all company services and prioritizing what's exposed Support audit follow-up and keep GRC documentation up to date Security AwarenessCommunicate new threats to the team, document findings, and broadcast security updates company-wide Run phishing simulations and security training (via Riot) Monitoring & CoverageOwn the monitoring of security channels and alerts, including weekend coverage, so nothing goes unanswered IT & Access ManagementSet up and secure new employee devices (MDM), manage access provisioning/deprovisioning AI Security MonitoringKeep an eye on emerging attack techniques targeting generative AI (prompt injection, jailbreaks, content filter bypass) Track security incidents and vulnerabilities disclosed by the third-party AI providers we rely on Your Qualifications Hard SkillsSolid experience in application security (code review, vulnerability management) Experience coordinating or conducting penetration tests / security audits Comfortable shipping code and working with Git/GitHub workflows Scripting/automation skills Bonus: familiarity with AI/LLM security concepts (prompt injection, jailbreaking, adversarial testing) — this is still an emerging field, so curiosity matters more than proven experience Soft Skills🗣 Strong communication & collaborative skills (perfectly fluent in English) 🧢 Goal-orientated, ownership and commitm