Security Engineer (Remote - Europe)

Our Vision & Products

🚀 EverAI — Building the Future of AI Companionship

One of the Top 15 Largest & Fastest-Growing AI Companies in the World

50 Million Users in 2 years — Help Us Reach 100M first, 500M next

At EverAI, we’re shaping what it means to connect with AI. With 50 million users and counting, we're not just building products — we're creating entirely new categories.

Our flagship product is the world’s largest AI companionship platform, redefining relationships for millions. It is governed by our proprietary moderation system, EverGuard — an internal AI designed to ensure everything we build is safe, ethical, and human-first.

And we’re only just getting started!

Our Team

We are an enthusiastic, passionate and hardworking team of ≈ 100 people. Our founding team has strong entrepreneurial experience building and scaling web products from 0 to IPO.

Alexis Soulopoulos [CEO]

• 10+ years in Tech Executive Leadership

• Co-Founder Mad Paws Holdings (from 0 to IPO)

• Forbes 30 under 30 + Deloitte TechFast50 ’22 & ‘23

Michael Monin [Co-founder & CTO]

• 10+ years as CTO / COO (web2/web3), 3 years in AI/LLM

• Serial-entrepreneur: MTK Digital (exited / 0->$20m revenue) and Zipchat (AI Chatbot for E-commerce brands)

Thomas Lacroix [Co-founder & CMO]

• 8+ years in Customer Acquisition & E-commerce Growth

• Serial-entrepreneur: Curatible (sold to Blackstone) and MTK Digital (exited / 0->$20m revenue)

Maruša Fasano [CFO/Legal]

• 25+ years in Finance, Strategy, M&A

• Ex-CFO/M&A @Curatible (exited to Blackstone)

• Ex-President of the Board @SotremoSA (exited)

• Co-founder/CFO @SoftOne (exited)

Your Role

As a Security Engineer, you’ll own application security for a fast-growing AI companionship platform. This is a hands-on AppSec role: you’ll review code, find real vulnerabilities and drive fixes across the stack. You’ll be the main security person in the company, reporting directly to our CTO and Co-Founder. You’ll set direction yourself and explain risk clearly to non-security colleagues. Our product includes AI-generated content, including NSFW content, and you’ll also keep an eye on AI-specific threats like prompt injection. Real ownership from day one.

This isn’t an infrastructure, networking or DevSecOps role: we’re looking for application security depth.

Key Responsibilities

Application security (the core of the role)

Review code every week to catch vulnerabilities before they ship

Find, prioritize and drive fixes for real vulnerabilities across the stack, not surface-level issues

Audits and pentests

Coordinate external security audits and penetration tests

Challenge findings where needed, and follow them through to fixes

Engineering and automation

Automate security work and build the tools you need to scale it

Use AI tools daily in your security work: code review, pentests and scripting

Ownership and communication

Own security end to end with little support, and decide what matters most

Explain technical risk in plain words to the team and leadership

Cover security alerts, including occasional night and weekend on-call

Also part of the role (lighter)

Keep a simple risk register and GRC documentation up to date

Share security updates with the team and run awareness training

Watch emerging AI threats (prompt injection, jailbreaks, content filter bypass) and incidents at our AI providers

Your Qualifications

Must-haves

2+ years of hands-on security experience

Hands-on AppSec, not compliance only: you review code regularly and can walk us through a real vulnerability you found and fixed

Audits and pentests: you’ve coordinated an external audit or pentest and followed the findings through to fixes

Engineering workflows: you ship code with Git/GitHub, script in Python or Bash, and have recent hands-on work on a modern web stack (e.g. Rails, Node; GCP, Heroku or similar)

Ownership with little support: you’ve been the sole or lead security person, or owned a security area on your own. You’ve reviewed code or tested systems every week in the last 2 years, and you explain risk clearly to non-technical people