Security Engineer (Remote - Germany)
- Market p25–p75
- €74k–€120k
- Opened · 30d
- +0
- Closed · 30d
- −0
- Opened · 7d
- +2536% of open
- All security
- 8,291open
Our Vision & Products
🚀 EverAI — Building the Future of AI Companionship
One of the Top 15 Largest & Fastest-Growing AI Companies in the World
50 Million Users in 2 years — Help Us Reach 100M first, 500M next
At EverAI, we’re shaping what it means to connect with AI. With 50 million users and counting, we're not just building products — we're creating entirely new categories.
Our flagship product is the world’s largest AI companionship platform, redefining relationships for millions. It is governed by our proprietary moderation system, EverGuard — an internal AI designed to ensure everything we build is safe, ethical, and human-first.
And we’re only just getting started!
Our Team
We are an enthusiastic, passionate and hardworking team of ≈ 100 people. Our founding team has strong entrepreneurial experience building and scaling web products from 0 to IPO.
Alexis Soulopoulos [CEO]
• 10+ years in Tech Executive Leadership
• Co-Founder Mad Paws Holdings (from 0 to IPO)
• Forbes 30 under 30 + Deloitte TechFast50 ’22 & ‘23
Michael Monin [Co-founder & CTO]
• 10+ years as CTO / COO (web2/web3), 3 years in AI/LLM
• Serial-entrepreneur: MTK Digital (exited / 0->$20m revenue) and Zipchat (AI Chatbot for E-commerce brands)
Thomas Lacroix [Co-founder & CMO]
• 8+ years in Customer Acquisition & E-commerce Growth
• Serial-entrepreneur: Curatible (sold to Blackstone) and MTK Digital (exited / 0->$20m revenue)
Maruša Fasano [CFO/Legal]
• 25+ years in Finance, Strategy, M&A
• Ex-CFO/M&A @Curatible (exited to Blackstone)
• Ex-President of the Board @SotremoSA (exited)
• Co-founder/CFO @SoftOne (exited)
Your Role
As a Security Engineer, you’ll own application security for a fast-growing AI companionship platform. This is a hands-on AppSec role: you’ll review code, find real vulnerabilities and drive fixes across the stack. You’ll be the main security person in the company, reporting directly to our CTO and Co-Founder. You’ll set direction yourself and explain risk clearly to non-security colleagues. Our product includes AI-generated content, including NSFW content, and you’ll also keep an eye on AI-specific threats like prompt injection. Real ownership from day one.
This isn’t an infrastructure, networking or DevSecOps role: we’re looking for application security depth.
Key Responsibilities
Application security (the core of the role)
Review code every week to catch vulnerabilities before they ship
Find, prioritize and drive fixes for real vulnerabilities across the stack, not surface-level issues
Audits and pentests
Coordinate external security audits and penetration tests
Challenge findings where needed, and follow them through to fixes
Engineering and automation
Automate security work and build the tools you need to scale it
Use AI tools daily in your security work: code review, pentests and scripting
Ownership and communication
Own security end to end with little support, and decide what matters most
Explain technical risk in plain words to the team and leadership
Cover security alerts, including occasional night and weekend on-call
Also part of the role (lighter)
Keep a simple risk register and GRC documentation up to date
Share security updates with the team and run awareness training
Watch emerging AI threats (prompt injection, jailbreaks, content filter bypass) and incidents at our AI providers
Your Qualifications
Must-haves
2+ years of hands-on security experience
Hands-on AppSec, not compliance only: you review code regularly and can walk us through a real vulnerability you found and fixed
Audits and pentests: you’ve coordinated an external audit or pentest and followed the findings through to fixes
Engineering workflows: you ship code with Git/GitHub, script in Python or Bash, and have recent hands-on work on a modern web stack (e.g. Rails, Node; GCP, Heroku or similar)
Ownership with little support: you’ve been the sole or lead security person, or owned a security area on your own. You’ve reviewed code or tested systems every week in the last 2 years, and you explain risk clearly to non-technical people