Security Engineer (Remote - Spain)

Location: Spain Workplace: Remote OUR VISION & PRODUCTS 🚀 EverAI — Building the Future of AI Companionship One of the Top 15 Largest & Fastest-Growing AI Companies in the World 50 Million Users in 2 years — Help Us Reach 100M first, 500M next At EverAI, we’re shaping what it means to connect with AI. With 50 million users and counting, we're not just building products — we're creating entirely new categories. Our flagship product is the world’s largest AI companionship platform, redefining relationships for millions. It is governed by our proprietary moderation system, EverGuard — an internal AI designed to ensure everything we build is safe, ethical, and human-first. And we’re only just getting started! OUR TEAM We are an enthusiastic, passionate and hardworking team of ≈ 100 people. Our founding team has strong entrepreneurial experience building and scaling web products from 0 to IPO. Alexis Soulopoulos [CEO] • 10+ years in Tech Executive Leadership • Co-Founder Mad Paws Holdings (from 0 to IPO) • Forbes 30 under 30 + Deloitte TechFast50 ’22 & ‘23 Michael Monin [Co-founder & CTO] • 10+ years as CTO / COO (web2/web3), 3 years in AI/LLM • Serial-entrepreneur: MTK Digital (exited / 0->$20m revenue) and Zipchat (AI Chatbot for E-commerce brands) Thomas Lacroix [Co-founder & CMO] • 8+ years in Customer Acquisition & E-commerce Growth • Serial-entrepreneur: Curatible (sold to Blackstone) and MTK Digital (exited / 0->$20m revenue) Maruša Fasano [CFO/Legal] • 25+ years in Finance, Strategy, M&A • Ex-CFO/M&A @Curatible (exited to Blackstone) • Ex-President of the Board @SotremoSA (exited) • Co-founder/CFO @SoftOne (exited) YOUR ROLE As a Security Engineer, you’ll own application security for a fast-growing AI companionship platform. This is a hands-on AppSec role: you’ll review code, find real vulnerabilities and drive fixes across the stack. You’ll be the main security person in the company, reporting directly to our CTO and Co-Founder. You’ll set direction yourself and explain risk clearly to non-security colleagues. Our product includes AI-generated content, including NSFW content, and you’ll also keep an eye on AI-specific threats like prompt injection. Real ownership from day one. This isn’t an infrastructure, networking or DevSecOps role: we’re looking for application security depth. KEY RESPONSIBILITIES APPLICATION SECURITY (THE CORE OF THE ROLE) - Review code every week to catch vulnerabilities before they ship - Find, prioritize and drive fixes for real vulnerabilities across the stack, not surface-level issues AUDITS AND PENTESTS - Coordinate external security audits and penetration tests - Challenge findings where needed, and follow them through to fixes ENGINEERING AND AUTOMATION - Automate security work and build the tools you need to scale it - Use AI tools daily in your security work: code review, pentests and scripting OWNERSHIP AND COMMUNICATION - Own security end to end with little support, and decide what matters most - Explain technical risk in plain words to the team and leadership - Cover security alerts, including occasional night and weekend on-call ALSO PART OF THE ROLE (LIGHTER) - Keep a simple risk register and GRC documentation up to date - Share security updates with the team and run awareness training - Watch emerging AI threats (prompt injection, jailbreaks, content filter bypass) and incidents at our AI providers YOUR QUALIFICATIONS MUST-HAVES - 2+ years of hands-on security experience - Hands-on AppSec, not compliance only: you review code regularly and can walk us through a real vulnerability you found and fixed - Audits and pentests: you’ve coordinated an external audit or pentest and followed the findings through to fixes - Engineering workflows: you ship code with Git/GitHub, script in Python or Bash, and have recent hands-on work on a modern web stack (e.g. Rails, Node; GCP, Heroku or similar) - Ownership with little support: you’ve been the sole or lead security person, or owned a security area on your own. You’ve reviewed code or tested systems every week in the last 2 years, and you explain risk clearly to non-technical people - AI in your daily work: you use AI tools every day in your security work - A hacker mindset: You love breaking things to make them safer, and security isn’t only your job: you do it for fun too, through bug bounties, CTFs, research, write-ups or your own tools. NICE-TO-HAVES - ⭐ AI/LLM security testing (prompt injection, jailbreaking): a strong plus - Experience at an AI company or a scale-up - GRC awareness - Familiarity with MDM and access management SOFT SKILLS 🗣 Strong communication & collaborative skills (perfectly fluent in English) 🧢 Goal-orientated, ownership and commitment ⚡️ Doer mindset - we are moving fast and we need people who can find the right balance between executing, planning and strategy 🧢 Humble - willing to learn, open to feedback 🍭 #NSFW - you are comfortable working in an environment with products that are based on uncensored models and content WHY EVERAI? 📈 Exponential Growth: From 50M users in 2 years, to 100M next — and 500M beyond 🚀 Track Record of Category-Creating Innovation: We consistently launch world-first AI applications — setting the pace, not following it 🌍 Global Impact: Top-tier user growth, real-world adoption, and cultural relevance 🧠 Proven Leadership: A senior team that’s launched, scaled, and exited & IPO’d multiple scale ups — now fully focused on reshaping AI companionship 👥 Elite Remote Team: 100% remote and built to win — world-class talent from Tier 1 tech companies, with a culture of ownership, velocity, and radical creativity 🛡️ Ethical Core: Our AI ecosystem is governed by EverGuard, our proprietary AI moderation technology, ensuring responsible development at scale WHAT WE OFFER ✍️ Contract Type: We prefer B2B, but we’re flexible, what matters is long-term commitment and impact 📍 Work From Anywhere: Fully remote. Choose the environment where you do your best work 🏝️ Paid Time Off: 4 weeks (20 working days) of PTO per year to recharge and reset 👨‍👩‍👧‍👦 Annual Gathering: A yearly in-person meetup to connect, brainstorm, and celebrate wins together ❤️‍🩹 Health & Wellness Support: Monthly allowance of 100 USD for health insurance expenses & access to unlimited 1:1 sessions with psychologists and lifestyle experts through OpenUp (also available to up to three of your family members) 🏢 Co-Working Space Budget: Work from a co-working space up to twice per month (35 EUR / 40 USD per visit) to stay inspired and connected 📚 Learning Budget: Dedicated funds to support your professional growth: courses, books, conferences, events, or certifications 💻 Company Laptop & Equipment: Laptop provided + monitor budget up to 250 USD + keyboard/mouse/mic/headphones budget up to 150 USD ⚡ AI Tools Access: Premium access to ChatGPT, Hugging Face, Claude Code, and any other tool needed to excel at your job, power your ideas and workflows 🎯 TOP TIER TALENT IS OUR MULTIPLIER We’re a fully remote group of A-players from Tier 1 tech, led by an exec team who’ve launched, scaled, and exited multiple companies. We move fast, and care deeply about what we build — and who we build it with. We’re looking for exceptional talent ready to ship & distribute world-first AI products at scale, fast, and co-create with us this category-defining business. If that’s you — reach out and apply!