Вакансии

Location: Foster City, CA Workplace: Hybrid Replit is the agentic software creation platform that enables anyone to build applications using natural language. With millions of users worldwide, Replit is democratizing software development by removing traditional barriers to application creation. About the role: We are looking for a SOC Engineer to join our Security Operations team and help defend a fast-moving, cloud-native AI vibe-coding platform. In this role, your primary mandate will be building and evolving our security data lake, engineering reliable security telemetry, and owning high-fidelity detection engineering end-to-end. You will unify cloud, identity, endpoint, and application telemetry, staying on top of emerging threats to rapidly build and tune detections across our environment. Alongside this data and detection mandate, you will support incident investigations as needed to translate real-world threats into stronger automated defenses. This is a hands-on engineering role requiring strong technical depth, understanding of modern software engineering and CI/CD systems, familiarity with cloud-native infrastructure (especially GCP), and expertise in security data pipelines and detection workflows. What You'll Do: - Security Data Lake & Detection Engineering: Architect, expand, and maintain our security data lake while designing, testing, and tuning custom detection rules to maximize threat coverage and minimize noise across our cloud-native stack. - Threat Awareness & Rapid Assessment: Continuously monitor emerging threats (0-days, bad actor activity, public exploitation campaigns, bug bounty reports, customer security issues) and rapidly assess their applicability to Replit's infrastructure, SaaS services, internal tools, and platform components. - Investigation & Impact Analysis: Conduct targeted investigations to determine impact, analyze logs, telemetry, and system behaviors using SIEM, metrics, and Cloud Logging and identify gaps in detection/visibility. Required Skills & Experience: - Building and evolving the security data lake, unifying cloud, identity, endpoint, and application telemetry; hands-on experience with SIEM, Cloud Logging, and log-based investigation workflows. - Engineering reliable security infrastructure and automation using infrastructure-as-code to close visibility gaps and perform log-based investigations. - Proven expertise in detection engineering end-to-end, specifically developing, testing, and tuning custom detection rules to maximize threat coverage and reduce noise across complex environments. - Strong understanding of software engineering fundamentals (code structure, build systems, dependencies, package ecosystems). - Understanding of CI/CD pipelines and DevOps workflows. - Solid knowledge of cloud architecture, especially Google Cloud Platform (GCP) services in modern cloud-native deployments. - Familiarity with SaaS architectures, identity systems, and integration patterns. Bonus Qualifications: - Experience with threat intelligence, security research, or vulnerability analysis. - Familiarity with Kubernetes, containers, serverless infrastructure, or modern distributed systems. - Ability to write scripts or small tools for investigation or automation (Python, Go, Bash). - Experience working with bug bounty programs or coordinated vulnerability disclosure workflows. - Experience in fast-paced, cloud-native, or AI/ML-driven environments. Full-Time Employee Benefits Include: 💰 Competitive Salary & Equity 💹 401(k) Program with a 4% match (US Only) ⚕️ Health, Dental, Vision and Life Insurance 🩼 Short Term and Long Term Disability 🚼 Paid Parental, Medical, Caregiver Leave 🏝 Flexible Time Off (FTO) + Holidays 🚗 Commuter Benefits (In-Office & US Only) 📱 Monthly Wellness Stipend 🧑‍💻 Autonomous Work Environment 🖥 In Office Set-Up Reimbursement (In-Office Only) 🚀 Quarterly Team Gatherings ☕ In Office Amenities (In-Office Only) Want to learn more about what we are up to? - Self-driving Company https://replit.com/blog/self-driving-company - Replit Agent at Scale https://replit.com/blog/evaluating-and-improving-agent-at-scale - AI Adoption https://replit.com/blog/ai-adoption - Build Open-Source Apps https://replit.com/build/open-source-app-builder   Interviewing + Culture at Replit - Operating Principles https://blog.replit.com/operating-principles - Reasons not to work at Replit https://blog.replit.com/reasons-not-to-join-replit To achieve our mission of making programming more accessible around the world, we need our team to be representative of the world. We welcome your unique perspective and experiences in shaping this product. We encourage people from all kinds of backgrounds to apply, including and especially candidates from underrepresented and non-traditional backgrounds.

Location: Poland; Czechia; Bulgaria; Croatia; Romania; France About Gramian Gramian Consultancy is a boutique consultancy specializing in IT professional services and engineering talent solutions. With a strong background in software engineering and leadership, we help companies build high-performing teams by matching them with professionals who truly fit their needs. About the Role Our client is a Big4 Consultancy group that works with leading financial institutions on AI-driven transformation, automation, advanced analytics, and financial crime prevention . Their work spans intelligent fraud detection, AML/KYC modernization, autonomous workflows, enterprise AI platforms, and the secure industrialization of AI in highly regulated environments. We are looking for an experienced Security Architect to lead the security approval and data-protection readiness of the solution. You will act as the main technical security contact with the client’s CISO, data-protection, and country security teams , covering cloud security, AI/LLM risk, penetration testing, secure data handling, and formal architecture approvals. CONTRACT: Contractor assignment, expected October 2026 – July 2027, with potential extension COMMITMENT: Full-time LOCATIONS: Central and Eastern Europe, EU-authorized, REMOTE PROCESS: Initial qualification followed by technical and client interviews NOTES: Fluent English is required. Responsibilities Review the end-to-end security architecture across identity, access, secrets, networking, data handling, and logging. Ensure sensitive and personal data are handled securely and are not exposed through logs or operational tooling. Prepare and drive formal security architecture approval and new-technology review processes. Support security reviews covering AI / LLM usage, web search, and new technology components . Coordinate penetration testing and follow up on remediation of findings. Support the Data Protection Impact Assessment (DPIA) and AI model-risk review. Define and agree data-handling principles with the client CISO, data-protection, and country security teams. Review cloud and application security controls across Azure, Databricks, APIs, and supporting services. Support secure delivery across development, testing, production, and country rollout environments. Act as the primary security point of contact between engineering teams and client security stakeholders. Requirements Strong experience in security architecture and approval processes within large regulated organizations. Strong hands-on knowledge of Azure security , including Entra ID, Key Vault, private endpoints, and Microsoft Defender. Experience with penetration testing, vulnerability management, and OWASP practices. Knowledge of OWASP security risks for LLM / AI applications . Experience with code and dependency scanning using tools such as SonarQube, JFrog Xray, or similar. Strong understanding of GDPR, data protection, privacy, and secure handling of personal data . Experience working with CISO, security governance, privacy, and engineering teams. Ability to communicate security risks and controls clearly to both technical and non-technical stakeholders. Highly preferred: Experience in insurance, banking, or other highly regulated environments .

Location: Utah | Remote Please Note: This is a remote position available in the state listed on this job. Additionally, employment with BambooHR is contingent on passing both a background and credit check. AI at BambooHR At BambooHR, we believe in leveraging cutting-edge technology to empower people and transform HR. We’re actively integrating AI into our solutions and workflows to enhance efficiency and drive innovation. To that end, we’re looking to our existing team members and future hires to share this forward-thinking mindset: individuals who are curious about AI’s potential, eager to learn and adapt, and ready to explore how intelligent tools can elevate their work along with BambooHR’s impact on setting people free to do great work. Join us in reimagining the future of HR! Essential Job Duties AI is becoming part of how BambooHR's platform works, from features we build to agents that connect through open protocols. We're hiring a Staff Application Security Engineer to help lead application security through that shift and beyond. You'll set the review bar and standards for agentic systems, and you'll architect the agents our security team uses to scale its work. It is a hands-on, organization-level role for someone who does well in ambiguity and gets results through knowledge, influence, and the help of their team. You will: Lead security reviews and threat models of AI features and agentic systems — including autonomous agents, MCP servers, and third-party integrations — and keep review playbooks and quality criteria current Set BambooHR's security standards for AI agents, covering identity and delegated authorization, tenant- and user-scoped data access, safe handling of tool output, tool supply chain, and human-approval requirements, and track adoption as threats evolve Own the design of agents the security team uses for finding validation, triage, review assistance, and remediation — building and shipping them with clear evaluation criteria, bounded permissions, and human approval gates for high-impact actions Help developers and security champions build and use agents safely through self-serve guidance and tooling, and advocate for the partner-team investment that work requires Work with engineering and product leadership to embed security requirements into the SDLC, including design-time and release-time gates for AI features, and make agent-assisted code review, finding validation, and fix suggestions a default part of every team's CI/CD pipeline with clear blocking criteria and a fast exception path Run security programs that span multiple teams and quarters — setting goals, milestones, and success metrics; maintaining a lightweight intake, prioritization, and retrospective cadence; coordinating dependencies across engineering, product, and operations; and reporting progress, risks, and tradeoffs to leadership Represent AppSec in architecture forums, harmonize security requirements to reduce duplicated effort across teams, act as a point of escalation, and coach leaders on security tradeoffs Partner with Legal, Privacy, and GRC on AI governance to close gaps between policy intent and technical implementation through guardrails and automation, including for emerging AI regulations Train and coach software engineers and engineering teams on secure design and threat modeling, with emphasis on authentication, authorization, multi-tenancy, and AI features Mentor fellow security engineers on technical direction and career growth, and close skill gaps on the security team through onboarding, training, and mentorship Participate in an on-call rotation as needed to support incident response and resolve escalated security issues What You Need to Get the Job Done Bachelor's degree in Computer Science, Information Security, or a related field, or equivalent practical experience 8+ years of experience in security, including 5+ years of hands-on experience in application security Experience securing multi-tenant SaaS platforms, including tenant isolation Cloud and infrastructure security experience (e.g., AWS, Azure, GCP) Hands-on experience building AI agents or agentic workflows, with concrete examples of how you handled permissions, failures, and validation — production systems, internal tools, personal or open-source projects, and substantial prototypes all count Demonstrated ability to evaluate the security of AI and agentic systems, including prompt injection, tool and context poisoning, excessive agency, delegated authorization, data leakage, and supply-chain risk in models and tools; familiarity with the OWASP Top 10 for LLM Applications, the OWASP Top 10 for Agentic Applications, or comparable frameworks Ability to design evaluations for agentic workflows covering task success, false positives and negatives, adversarial cases, and regression checks Proven experience leading threat modeling (e.g., STRIDE, attack trees) and design reviews for complex applications and APIs Deep understanding of web application and API security, including authentication and authorization (OAuth 2.0 scopes and delegation, OpenID Connect, token audience and validation), session management, and access control models Strong software engineering skills in at least one language (e.g., Python, TypeScript, PHP), including testing and maintaining tools other people depend on A track record of influencing without authority: leading cross-team initiatives, building business cases, and explaining technical risk in business terms to engineering, product, legal, and leadership audiences Experience mentoring engineers, formally or informally Sound judgment in ambiguous situations, including the ability to explain a tradeoff, recommend a mitigation, and bring risk-acceptance decisions to the right owner What Will Make Us REALLY Love You Experience securing MCP servers and gateways Experience securing AI coding assistants or developer agent tooling at organizational scale, or integrating AI-driven security checks into CI/CD pipelines Familiarity with AI governance and SaaS compliance frameworks (e.g., NIST AI RMF, ISO/IEC 42001, EU AI Act, SOC 2, ISO 27001) Relevant security certifications (e.g., CSSLP, OSWE, GWAPT) Experience building or running security champions programs, such as recruiting and training champions or embedding security advocates in engineering teams What You'll Love About Us A Great Company Culture that has been recognized by multiple organizations like Inc , and Salt Lake Tribune Comprehensive health, life, and disability insurance Generous leave policies that include 4 weeks of vacation, 12 company holidays, parental leave, and volunteer time off so you can enjoy quality of life 401k plans with up to 6% company match $2000 Paid-Paid Vacation bonus EAP through Headspace Check out all our benefits that benefit you #LI-Remote About Us At BambooHR, we're building something different: we're building a people intelligence platform that transforms HR and sets people free to do great work! We're a proven market leader driving innovation while building lasting success through thoughtful, sustainable growth. Here, you'll find a place that champions growth: both professional and personal, both individual and collective. We invest in potential, giving you the space to stretch your capabilities and turn good ideas into reality while providing the safety net of a supportive, values-driven culture. Our approach combines meaningful work with meaningful lives, offering competitive benefits, professional development, and the flexibility to thrive both in and outside the office. What sets us apart isn't just what we do, but how we do it: with openness, integrity, and a shared commitment to doing the right thing. Join us in creating HR software that makes work better for everyone, while we make work better for you. BambooHR is committed to the full inclusion of all qualified individuals and will ensure that persons with disabilities are provided reasonable accommodations throughout the hiring process.  If you would like to request accommodations, please let your recruiter know. BambooHR is An Equal Opportunity Employer--M/F/D/V Because our team members are trusted to handle sensitive information, we require all candidates that receive and accept employment offers to complete a background check before being hired. For information on California Privacy Policy, click here . Our process utilizes AI as an assistant to efficiently process and analyze candidate data. Recruiters and hiring managers maintain full oversight and accountability, ensuring that all final selection and rejection decisions are human-made and based solely on objective job qualifications. Please see our General Privacy Notice and California Privacy Notice for more details. See our AI Guidelines for Candidates for details on how BambooHR uses AI in recruiting, how we expect candidates to use AI, and what is not allowed.

Location: Australia What We Do: Cybercrime is growing, and more businesses are getting hit by threats that used to target only the biggest organizations. That pushes defenders like us to operate at the highest level, and it deepens our need for good people who want to make a meaningful impact. Founded in 2015 by former NSA cyber operators, Huntress is a remote-first team working to make enterprise-grade cybersecurity accessible to businesses of all sizes. We work closely with security teams and service providers protecting complex environments, often without the time or headcount to handle it all. That’s why we build our technology in-house and back it with a 24/7 human-led Security Operations Center (SOC). As a result, our platform is never disconnected from the experts who manage it, ensuring our customers' protection. Huntress now secures more than 6M endpoints and 17M identities worldwide. Those numbers keep growing because more businesses rely on us to help carry the load and operate with more confidence. Every day, you can see that commitment in how we stand with our customers and how we show up for each other. Reports to: Manager, Security Operations Center Location: Remote Australia Compensation Range: $180,000 to $215,000 AUD base plus bonus and equity. What You’ll Do: As our Principal SOC Analyst in Australia, you're the most senior technical voice on the APAC SOC floor, working Monday to Friday. You'll take ownership of the hardest intrusions, turn what the floor sees every day into durable detection and product improvements, and raise the bar for every analyst around you. You'll lead by example as a cultural driver for the team, and you'll help build our Human Led Agentic SOC, where agents handle volume and humans own quality. You'll work closely with Product, Product Research and Detection Engineering & Threat Hunting. We'll also support you in publishing your research through Huntress blogs, webinars and conference talks. Responsibilities: Own complex, multi-host intrusions end to end, from triage through forensic timelining, root cause and remediation, across endpoint, identity (Microsoft 365 / Google Workspace) and SIEM telemetry Act as the SOC's technical partner to Product, Product Research and DE&TH: turn recurring floor pain points into lasting detection, suppression and product fixes rather than workarounds Perform advanced static and dynamic malware analysis, research emerging tradecraft, and publish findings through Huntress content Find repeatable investigation patterns and toil, then design, build and maintain both automation and human-led agentic workflows with Workflow Engine owners, Product and Engineering, with inline QC/QA built in from the start Own quality on the floor: grade AI agent and analyst output, trace misses to their root cause and fix them at the source, and act as final technical reviewer on detection tuning, suppression decisions and high-impact incident reports Provide technical leadership and mentoring across every level of the team: set investigation standards, run case reviews, ride-alongs and knowledge sessions, advise the Senior Manager on SOC direction, and help assess candidates in the hiring process Be a cultural driver for the team: model Give a $hit, Warrior Spirit and Outcome-Obsessed, keep a low-ego, share-everything team culture, and champion the “agents handle volume, humans own quality” mindset Handle threat-related escalations from SOC Support, writing clear explanations of complex activity and its business risk for technical and non-technical audiences What You Bring To The Team: 6+ years in SOC, Incident Response, DFIR or MDR roles, including leading multi-host intrusion investigations Deep knowledge of attacker tradecraft across MITRE ATT&CK (credential access, lateral movement, persistence, defense evasion, living-off-the-land) and how to detect it Deep forensic and investigation experience across Windows, macOS and Linux Strong cloud identity investigation and remediation experience in Microsoft 365 / Entra ID and Google Workspace Advanced static and dynamic malware analysis, including extracting IOCs and determining capability and intent Strong enterprise Windows administration (Active Directory, Group Policy, PowerShell, domain trusts) and core networking knowledge Strong hands-on AI skills: daily use of tools such as Claude and Codex for analysis, research and building automation and agentic workflows (Python, PowerShell or similar), with sound judgment about validating their output Understanding of inline quality delivery: building QC/QA into workflows as they run (quality gates, statistical sampling, drift detection and regression testing) rather than relying on after-the-fact review Proven technical leadership and mentoring: you've raised the standard of a team, not just your own work, and you explain complex findings clearly in writing and verbally Preferred Qualifications: Published research, blogs, conference talks or open-source security tooling Detection engineering experience: writing and tuning detections and SIEM queries Investigations in other cloud platforms such as Azure, AWS or GCP Previous MSP/MSSP/MDR experience and familiarity with RMM tools What We Offer: Fully remote work At least one annual trip to the US for Summer Summit, with additional local events in Australia! New starter home office set up reimbursement ($800 AUD) 12 weeks paid parental leave for both primary and secondary carers Monthly digital allowance for personal phone and internet costs ($185 AUD) Monthly home office tech stipend to upgrade or replace equipment ($40 AUD) Subsidised private health insurance through our preferred provider Stock options for all full-time employees Access to the BetterUp platform for coaching, personal, and professional growth People from all culturally diverse backgrounds, including Aboriginal & Torres Strait Islander Peoples, are encouraged to apply. Huntress is committed to creating a culture of inclusivity where every single member of our team is valued, has a voice, and is empowered to come to work every day just as they are. We do not discriminate based on race, ethnicity, color, ancestry, national origin, religion, sex, sexual orientation, gender identity, disability, veteran status, genetic information, marital status, or any other legally protected status. We do discriminate against hackers who try to exploit businesses of all sizes. Accommodations: If you require reasonable accommodation to complete this application, interview, or pre-employment testing or participate in the employee selection process, please direct your inquiries to accommodations@huntresslabs.com . Please note that non-accommodation requests to this inbox will not receive a response. Huntress uses artificial intelligence tools to assist in reviewing and evaluating job applications, including resume screening, skills assessment, and candidate matching and comparisons. These AI tools support our human recruiters in the initial review process, but do not make final hiring decisions without human involvement. By submitting your application, you acknowledge this use of AI in our recruitment process. Please review our Candidate Privacy Notice for more details on our practices and your data privacy rights. #BI-Remote

Location: New York, NY (HQ) Workplace: Hybrid ABOUT RAMP Ramp is building the smart infrastructure for finance teams, embedded in the transaction flow of every dollar a business spends. We automate how over $275B in annualized spend flows in and out of 85,000+ companies: authorizing payments, flagging risk, categorizing spend, and closing books. The problems are high-stakes, data-dense, and unforgiving. We hire people with high agency and high urgency. We look for slope over intercept. We care less about where you trained and more about what you’ve built. At Ramp, everyone is a builder who owns problems end to end and makes consequential decisions that shape the outcome. The median Ramp customer saves 7.5% and grows revenue 16% in their first year – far in excess of businesses operating without Ramp. We believe every ambitious company deserves the same. If you want to build systems that directly shape how companies move and manage billions, Ramp is the place to do it. ABOUT THE ROLE Corporate Security at Ramp owns the identity and access layer for the company: Okta, Google Workspace, the SaaS applications behind them, and the governance that decides who holds what. We are hiring a Senior Security Engineer, Identity, to turn that layer into IAM as a service — a platform the rest of Ramp can use without filing a ticket.   The role is hands-on. You will design how identity works at Ramp and write the code that implements it: identity configuration in Terraform, entitlements created and governed through an agentic workflow, and an on-call agent that answers access questions before anyone has to ask a person. As more access flows between applications and AI agents rather than people, you will own how those identities are issued, scoped, and audited.   You will report to the Corporate Security lead and work closely with IT, Security Engineering, AI DevX, and the Data team. WHAT YOU'LL DO - Own Terraform for identity services: Okta applications, authorization servers, authentication policies, groups and group rules, and SCIM provisioning - Design and operate custom authorization servers, including audiences, scopes, claims, and access policies for internal services and AI agents - Implement app-to-app and agent access through Cross App Access (XAA) and ID-JAG, so delegated access is brokered and governed by the IdP rather than granted user by user - Own our IGA platform: the entitlement catalog, ownership, access requests, time-bound grants, and certifications - Build the agentic workflow that takes a team from "I have a new group of people who need access to X" to a defined, owned, and governed entitlement, with the Terraform and IGA changes opened for review - Build identity graphs with ISPM tooling to target overprivileged and long-standing access across human and non-human identities - Build the identity data lake behind an on-call agent that can explain events like a User Not Assigned Application error in Okta before the employee opens a ticket WHAT YOU NEED - 6+ years in identity engineering or IAM, including operational ownership of Okta or an equivalent identity provider at scale - Deep understanding of OAuth 2.0, OIDC, SAML, and SCIM, including how custom authorization servers issue and enforce aud, scope, and claims - Working knowledge of how XAA and ID-JAG work under the hood, including token exchange and JWT bearer grants - Experience with ISPM or identity graph tooling, and turning its findings into automated remediation - Experience owning an IGA platform or building the equivalent in-house - Terraform experience managing identity providers, including module design, state, and CI - Programming in Python or Go, with experience building against platform APIs BENEFITS AVAILABLE TO ALL FULL-TIME RAMP EMPLOYEES (GLOBAL) - Flexible PTO - Centralized home-office equipment ordering - Health and wellness stipend - Budget for intra-office travel - Weekly coffee stipend UNITED STATES - 100% medical, dental & vision insurance coverage for you, with partial coverage for dependents - One Medical annual membership - 401(k), including employer match on contributions made while employed by Ramp - Fertility HRA (up to $10,000 per year) - Parental leave: up to 16 weeks (birthing + bonding) or 8 weeks (bonding only) at 100% pay - Pet insurance - In-office perks: lunch, snacks, drinks, and more - Relocation expense coverage to NYC or SF (if needed) CANADA - Group medical, dental, and vision coverage through Sun Life - Life, AD&D, and disability coverage - Fertility drug coverage (up to $4,000 lifetime) - Group Retirement Plan with employer match (RRSP + DPSP) - Parental leave: up to 16 weeks (birthing + bonding) or 8 weeks (bonding only) at 100% pay, with additional time available at reduced pay - Employee Assistance Program and virtual care through Lumino Health UNITED KINGDOM - Private medical insurance through Freedom Elite - Virtual GP and at-home care via eMed x Livi - Workplace pension through Penfold, with salary sacrifice option - Parental leave: up to 16 weeks (birthing + bonding) or 8 weeks (bonding only) at 100% pay with additional time available at reduced pay REFERRAL INSTRUCTIONS If you are being referred for the role, please contact that person to apply on your behalf.   OTHER NOTICES Pursuant to the San Francisco Fair Chance Ordinance, we will consider for employment qualified applicants with arrest and conviction records.   Beware of recruiting scams: Ramp will only contact you through official @Ramp.com http://Ramp.com email addresses and will never ask for payment or sensitive personal information during the hiring process.   Ramp Applicant Privacy Notice https://ramp.com/legal/applicant-privacy-notice

Location: New York, NY Our mission at Duolingo is to develop the best education in the world and make it universally available. It’s a big mission, and that’s where you come in! At Duolingo, you’ll join a team that cares about finding innovative solutions to complex technical problems , running countless experiments (300+ at a time!) with our massive user base to make data-driven decisions, and educating our users and employees alike. You’ll have limitless learning opportunities, mentorship and collaboration with world-class minds, and a variety of projects with large scopes — while doing work that’s both fun and meaningful. Join our life-changing mission to develop education for our half a billion (and growing!) learners around the world. About the role As a Staff Security Engineer, you will shape and deliver Duolingo’s security strategy, safeguarding our learners, employees, systems, and services. You’ll identify the highest-impact security problems, lead complex initiatives from proposal through production, and build durable security capabilities across our applications and cloud infrastructure. Working across Engineering, Product, Legal, Finance, and IT, you’ll make practical risk decisions, establish secure-by-default patterns, and help teams ship safely at scale. This role is based in New York City. We know great candidates bring different combinations of experience. If you meet some or most of the qualifications below, we encourage you to apply! :brain:  You will... Set technical direction for security across Duolingo’s applications, cloud infrastructure, and engineering systems. Lead complex, multi-team security initiatives from problem definition and design through implementation, measurement, and ongoing ownership. Design and build scalable security services, controls, and automation that prevent, detect, and remediate risks with minimal manual effort. Partner with engineering teams to threat model systems, review architecture and code, prioritize risks, and deliver practical mitigations. Strengthen security across the software-development lifecycle, including secrets management, dependency security, vulnerability management, and CI/CD controls. Evaluate Duolingo’s security posture, use evidence to identify the highest-impact investments, and define measurable outcomes for security programs. Lead technical response to significant security incidents and translate lessons learned into lasting improvements. Establish reusable secure-by-default patterns for cloud and application infrastructure, including infrastructure as code. Communicate technical risks, tradeoffs, and recommendations clearly to engineering teams and company leaders. Mentor engineers, scale security knowledge through documentation and guidance, and raise the technical bar across Engineering. :check: You have... A track record of leading large, complex security engineering initiatives across multiple teams from proposal through production. Deep experience in at least two of the following areas: application security, product security, cloud security, infrastructure security, detection and response, or security automation. Strong software-engineering skills in one or more programming or scripting languages and experience building reliable production systems or internal platforms. Experience securing cloud environments and designing controls for identity, networking, data protection, secrets, logging, and workload security. Experience applying threat modeling, architecture review, code review, and vulnerability analysis to real-world systems. Experience using infrastructure as code and CI/CD to deliver repeatable, testable, and secure configurations. Sound judgment in balancing security risk, engineering effort, product needs, and business priorities. Clear written and verbal communication skills, including the ability to influence stakeholders with different technical backgrounds. The ability to work from or relocate to New York City. :star: Exceptional candidates will have... Experience building a security program or technical capability from an early stage and scaling it across an engineering organization. Experience securing large, multi-account or multi-cloud environments, particularly AWS and GCP. Experience creating security platforms or paved-road patterns adopted broadly by engineers. Experience leading high-severity incident response and driving durable improvements afterward. Experience applying AI-assisted tooling to security analysis, remediation, or control validation. The offered salary is dependent upon several factors, including work experience, skills, and internal peer comparisons. The posted range is subject to change in the future. For this role, base salary is supplemented by equity compensation. We encourage you to talk with your recruiter for more information related to compensation for this role! Salary Range: $204,000 — $306,000 USD Benefits: Take a peek at how we care for our employees' holistic well-being with our benefits here . Job Alerts: Sign up for job alerts here . Accommodations: We will do everything we can within reason to make sure that your interview takes place in an environment that fairly and accurately assesses your skills. If you need assistance or accommodation, please contact accommodations@duolingo.com . Equal Employment Opportunity: Duolingo is proud to be an Equal Employment Opportunity employer. We do not discriminate based upon race, religion, color, national origin, gender (including pregnancy, childbirth, or related medical conditions), sexual orientation, gender identity, gender expression, age, status as a protected veteran, status as an individual with a disability, or other applicable legally protected characteristics. Fraud Warning: Unfortunately, there is a rise in scammers pretending to be real Duolingo employees. Duolingo and our employees will never ask for your Social Security number, bank details, or passport info, and we’ll never ask you to deposit a check, purchase equipment, or exchange money during the interview process. Real Duolingo employees always use an email that ends in @duolingo.com or @recruiting.duolingo.com. Stay alert and double-check these details before sharing any information. By applying for this position your data will be processed as per the Duolingo Applicant Privacy Notice .

Location: Poland Workplace: Remote OUR VISION & PRODUCTS 🚀 EverAI — Building the Future of AI Companionship One of the Top 15 Largest & Fastest-Growing AI Companies in the World 50 Million Users in 2 years — Help Us Reach 100M first, 500M next At EverAI, we’re shaping what it means to connect with AI. With 50 million users and counting, we're not just building products — we're creating entirely new categories. Our flagship product is the world’s largest AI companionship platform, redefining relationships for millions. It is governed by our proprietary moderation system, EverGuard — an internal AI designed to ensure everything we build is safe, ethical, and human-first. And we’re only just getting started! OUR TEAM We are an enthusiastic, passionate and hardworking team of ≈ 100 people. Our founding team has strong entrepreneurial experience building and scaling web products from 0 to IPO. Alexis Soulopoulos [CEO] • 10+ years in Tech Executive Leadership • Co-Founder Mad Paws Holdings (from 0 to IPO) • Forbes 30 under 30 + Deloitte TechFast50 ’22 & ‘23 Michael Monin [Co-founder & CTO] • 10+ years as CTO / COO (web2/web3), 3 years in AI/LLM • Serial-entrepreneur: MTK Digital (exited / 0->$20m revenue) and Zipchat (AI Chatbot for E-commerce brands) Thomas Lacroix [Co-founder & CMO] • 8+ years in Customer Acquisition & E-commerce Growth • Serial-entrepreneur: Curatible (sold to Blackstone) and MTK Digital (exited / 0->$20m revenue) Maruša Fasano [CFO/Legal] • 25+ years in Finance, Strategy, M&A • Ex-CFO/M&A @Curatible (exited to Blackstone) • Ex-President of the Board @SotremoSA (exited) • Co-founder/CFO @SoftOne (exited) YOUR ROLE As a Security Engineer, you’ll own application security for a fast-growing AI companionship platform. This is a hands-on AppSec role: you’ll review code, find real vulnerabilities and drive fixes across the stack. You’ll be the main security person in the company, reporting directly to our CTO and Co-Founder. You’ll set direction yourself and explain risk clearly to non-security colleagues. Our product includes AI-generated content, including NSFW content, and you’ll also keep an eye on AI-specific threats like prompt injection. Real ownership from day one. This isn’t an infrastructure, networking or DevSecOps role: we’re looking for application security depth. KEY RESPONSIBILITIES APPLICATION SECURITY (THE CORE OF THE ROLE) - Review code every week to catch vulnerabilities before they ship - Find, prioritize and drive fixes for real vulnerabilities across the stack, not surface-level issues AUDITS AND PENTESTS - Coordinate external security audits and penetration tests - Challenge findings where needed, and follow them through to fixes ENGINEERING AND AUTOMATION - Automate security work and build the tools you need to scale it - Use AI tools daily in your security work: code review, pentests and scripting OWNERSHIP AND COMMUNICATION - Own security end to end with little support, and decide what matters most - Explain technical risk in plain words to the team and leadership - Cover security alerts, including occasional night and weekend on-call ALSO PART OF THE ROLE (LIGHTER) - Keep a simple risk register and GRC documentation up to date - Share security updates with the team and run awareness training - Watch emerging AI threats (prompt injection, jailbreaks, content filter bypass) and incidents at our AI providers YOUR QUALIFICATIONS MUST-HAVES - 2+ years of hands-on security experience - Hands-on AppSec, not compliance only: you review code regularly and can walk us through a real vulnerability you found and fixed - Audits and pentests: you’ve coordinated an external audit or pentest and followed the findings through to fixes - Engineering workflows: you ship code with Git/GitHub, script in Python or Bash, and have recent hands-on work on a modern web stack (e.g. Rails, Node; GCP, Heroku or similar) - Ownership with little support: you’ve been the sole or lead security person, or owned a security area on your own. You’ve reviewed code or tested systems every week in the last 2 years, and you explain risk clearly to non-technical people - AI in your daily work: you use AI tools every day in your security work - A hacker mindset: You love breaking things to make them safer, and security isn’t only your job: you do it for fun too, through bug bounties, CTFs, research, write-ups or your own tools. NICE-TO-HAVES - ⭐ AI/LLM security testing (prompt injection, jailbreaking): a strong plus - Experience at an AI company or a scale-up - GRC awareness - Familiarity with MDM and access management SOFT SKILLS 🗣 Strong communication & collaborative skills (perfectly fluent in English) 🧢 Goal-orientated, ownership and commitment ⚡️ Doer mindset - we are moving fast and we need people who can find the right balance between executing, planning and strategy 🧢 Humble - willing to learn, open to feedback 🍭 #NSFW - you are comfortable working in an environment with products that are based on uncensored models and content WHY EVERAI? 📈 Exponential Growth: From 50M users in 2 years, to 100M next — and 500M beyond 🚀 Track Record of Category-Creating Innovation: We consistently launch world-first AI applications — setting the pace, not following it 🌍 Global Impact: Top-tier user growth, real-world adoption, and cultural relevance 🧠 Proven Leadership: A senior team that’s launched, scaled, and exited & IPO’d multiple scale ups — now fully focused on reshaping AI companionship 👥 Elite Remote Team: 100% remote and built to win — world-class talent from Tier 1 tech companies, with a culture of ownership, velocity, and radical creativity 🛡️ Ethical Core: Our AI ecosystem is governed by EverGuard, our proprietary AI moderation technology, ensuring responsible development at scale WHAT WE OFFER ✍️ Contract Type: We prefer B2B, but we’re flexible, what matters is long-term commitment and impact 📍 Work From Anywhere: Fully remote. Choose the environment where you do your best work 🏝️ Paid Time Off: 4 weeks (20 working days) of PTO per year to recharge and reset 👨‍👩‍👧‍👦 Annual Gathering: A yearly in-person meetup to connect, brainstorm, and celebrate wins together ❤️‍🩹 Health & Wellness Support: Monthly allowance of 100 USD for health insurance expenses & access to unlimited 1:1 sessions with psychologists and lifestyle experts through OpenUp (also available to up to three of your family members) 🏢 Co-Working Space Budget: Work from a co-working space up to twice per month (35 EUR / 40 USD per visit) to stay inspired and connected 📚 Learning Budget: Dedicated funds to support your professional growth: courses, books, conferences, events, or certifications 💻 Company Laptop & Equipment: Laptop provided + monitor budget up to 250 USD + keyboard/mouse/mic/headphones budget up to 150 USD ⚡ AI Tools Access: Premium access to ChatGPT, Hugging Face, Claude Code, and any other tool needed to excel at your job, power your ideas and workflows 🎯 TOP TIER TALENT IS OUR MULTIPLIER We’re a fully remote group of A-players from Tier 1 tech, led by an exec team who’ve launched, scaled, and exited multiple companies. We move fast, and care deeply about what we build — and who we build it with. We’re looking for exceptional talent ready to ship & distribute world-first AI products at scale, fast, and co-create with us this category-defining business. If that’s you — reach out and apply!

Location: Hungary Workplace: Remote OUR VISION & PRODUCTS 🚀 EverAI — Building the Future of AI Companionship One of the Top 15 Largest & Fastest-Growing AI Companies in the World 50 Million Users in 2 years — Help Us Reach 100M first, 500M next At EverAI, we’re shaping what it means to connect with AI. With 50 million users and counting, we're not just building products — we're creating entirely new categories. Our flagship product is the world’s largest AI companionship platform, redefining relationships for millions. It is governed by our proprietary moderation system, EverGuard — an internal AI designed to ensure everything we build is safe, ethical, and human-first. And we’re only just getting started! OUR TEAM We are an enthusiastic, passionate and hardworking team of ≈ 100 people. Our founding team has strong entrepreneurial experience building and scaling web products from 0 to IPO. Alexis Soulopoulos [CEO] • 10+ years in Tech Executive Leadership • Co-Founder Mad Paws Holdings (from 0 to IPO) • Forbes 30 under 30 + Deloitte TechFast50 ’22 & ‘23 Michael Monin [Co-founder & CTO] • 10+ years as CTO / COO (web2/web3), 3 years in AI/LLM • Serial-entrepreneur: MTK Digital (exited / 0->$20m revenue) and Zipchat (AI Chatbot for E-commerce brands) Thomas Lacroix [Co-founder & CMO] • 8+ years in Customer Acquisition & E-commerce Growth • Serial-entrepreneur: Curatible (sold to Blackstone) and MTK Digital (exited / 0->$20m revenue) Maruša Fasano [CFO/Legal] • 25+ years in Finance, Strategy, M&A • Ex-CFO/M&A @Curatible (exited to Blackstone) • Ex-President of the Board @SotremoSA (exited) • Co-founder/CFO @SoftOne (exited) YOUR ROLE As a Security Engineer, you’ll own application security for a fast-growing AI companionship platform. This is a hands-on AppSec role: you’ll review code, find real vulnerabilities and drive fixes across the stack. You’ll be the main security person in the company, reporting directly to our CTO and Co-Founder. You’ll set direction yourself and explain risk clearly to non-security colleagues. Our product includes AI-generated content, including NSFW content, and you’ll also keep an eye on AI-specific threats like prompt injection. Real ownership from day one. This isn’t an infrastructure, networking or DevSecOps role: we’re looking for application security depth. KEY RESPONSIBILITIES APPLICATION SECURITY (THE CORE OF THE ROLE) - Review code every week to catch vulnerabilities before they ship - Find, prioritize and drive fixes for real vulnerabilities across the stack, not surface-level issues AUDITS AND PENTESTS - Coordinate external security audits and penetration tests - Challenge findings where needed, and follow them through to fixes ENGINEERING AND AUTOMATION - Automate security work and build the tools you need to scale it - Use AI tools daily in your security work: code review, pentests and scripting OWNERSHIP AND COMMUNICATION - Own security end to end with little support, and decide what matters most - Explain technical risk in plain words to the team and leadership - Cover security alerts, including occasional night and weekend on-call ALSO PART OF THE ROLE (LIGHTER) - Keep a simple risk register and GRC documentation up to date - Share security updates with the team and run awareness training - Watch emerging AI threats (prompt injection, jailbreaks, content filter bypass) and incidents at our AI providers YOUR QUALIFICATIONS MUST-HAVES - 2+ years of hands-on security experience - Hands-on AppSec, not compliance only: you review code regularly and can walk us through a real vulnerability you found and fixed - Audits and pentests: you’ve coordinated an external audit or pentest and followed the findings through to fixes - Engineering workflows: you ship code with Git/GitHub, script in Python or Bash, and have recent hands-on work on a modern web stack (e.g. Rails, Node; GCP, Heroku or similar) - Ownership with little support: you’ve been the sole or lead security person, or owned a security area on your own. You’ve reviewed code or tested systems every week in the last 2 years, and you explain risk clearly to non-technical people - AI in your daily work: you use AI tools every day in your security work - A hacker mindset: You love breaking things to make them safer, and security isn’t only your job: you do it for fun too, through bug bounties, CTFs, research, write-ups or your own tools. NICE-TO-HAVES - ⭐ AI/LLM security testing (prompt injection, jailbreaking): a strong plus - Experience at an AI company or a scale-up - GRC awareness - Familiarity with MDM and access management SOFT SKILLS 🗣 Strong communication & collaborative skills (perfectly fluent in English) 🧢 Goal-orientated, ownership and commitment ⚡️ Doer mindset - we are moving fast and we need people who can find the right balance between executing, planning and strategy 🧢 Humble - willing to learn, open to feedback 🍭 #NSFW - you are comfortable working in an environment with products that are based on uncensored models and content WHY EVERAI? 📈 Exponential Growth: From 50M users in 2 years, to 100M next — and 500M beyond 🚀 Track Record of Category-Creating Innovation: We consistently launch world-first AI applications — setting the pace, not following it 🌍 Global Impact: Top-tier user growth, real-world adoption, and cultural relevance 🧠 Proven Leadership: A senior team that’s launched, scaled, and exited & IPO’d multiple scale ups — now fully focused on reshaping AI companionship 👥 Elite Remote Team: 100% remote and built to win — world-class talent from Tier 1 tech companies, with a culture of ownership, velocity, and radical creativity 🛡️ Ethical Core: Our AI ecosystem is governed by EverGuard, our proprietary AI moderation technology, ensuring responsible development at scale WHAT WE OFFER ✍️ Contract Type: We prefer B2B, but we’re flexible, what matters is long-term commitment and impact 📍 Work From Anywhere: Fully remote. Choose the environment where you do your best work 🏝️ Paid Time Off: 4 weeks (20 working days) of PTO per year to recharge and reset 👨‍👩‍👧‍👦 Annual Gathering: A yearly in-person meetup to connect, brainstorm, and celebrate wins together ❤️‍🩹 Health & Wellness Support: Monthly allowance of 100 USD for health insurance expenses & access to unlimited 1:1 sessions with psychologists and lifestyle experts through OpenUp (also available to up to three of your family members) 🏢 Co-Working Space Budget: Work from a co-working space up to twice per month (35 EUR / 40 USD per visit) to stay inspired and connected 📚 Learning Budget: Dedicated funds to support your professional growth: courses, books, conferences, events, or certifications 💻 Company Laptop & Equipment: Laptop provided + monitor budget up to 250 USD + keyboard/mouse/mic/headphones budget up to 150 USD ⚡ AI Tools Access: Premium access to ChatGPT, Hugging Face, Claude Code, and any other tool needed to excel at your job, power your ideas and workflows 🎯 TOP TIER TALENT IS OUR MULTIPLIER We’re a fully remote group of A-players from Tier 1 tech, led by an exec team who’ve launched, scaled, and exited multiple companies. We move fast, and care deeply about what we build — and who we build it with. We’re looking for exceptional talent ready to ship & distribute world-first AI products at scale, fast, and co-create with us this category-defining business. If that’s you — reach out and apply!

Location: Spain Workplace: Remote OUR VISION & PRODUCTS 🚀 EverAI — Building the Future of AI Companionship One of the Top 15 Largest & Fastest-Growing AI Companies in the World 50 Million Users in 2 years — Help Us Reach 100M first, 500M next At EverAI, we’re shaping what it means to connect with AI. With 50 million users and counting, we're not just building products — we're creating entirely new categories. Our flagship product is the world’s largest AI companionship platform, redefining relationships for millions. It is governed by our proprietary moderation system, EverGuard — an internal AI designed to ensure everything we build is safe, ethical, and human-first. And we’re only just getting started! OUR TEAM We are an enthusiastic, passionate and hardworking team of ≈ 100 people. Our founding team has strong entrepreneurial experience building and scaling web products from 0 to IPO. Alexis Soulopoulos [CEO] • 10+ years in Tech Executive Leadership • Co-Founder Mad Paws Holdings (from 0 to IPO) • Forbes 30 under 30 + Deloitte TechFast50 ’22 & ‘23 Michael Monin [Co-founder & CTO] • 10+ years as CTO / COO (web2/web3), 3 years in AI/LLM • Serial-entrepreneur: MTK Digital (exited / 0->$20m revenue) and Zipchat (AI Chatbot for E-commerce brands) Thomas Lacroix [Co-founder & CMO] • 8+ years in Customer Acquisition & E-commerce Growth • Serial-entrepreneur: Curatible (sold to Blackstone) and MTK Digital (exited / 0->$20m revenue) Maruša Fasano [CFO/Legal] • 25+ years in Finance, Strategy, M&A • Ex-CFO/M&A @Curatible (exited to Blackstone) • Ex-President of the Board @SotremoSA (exited) • Co-founder/CFO @SoftOne (exited) YOUR ROLE As a Security Engineer, you’ll own application security for a fast-growing AI companionship platform. This is a hands-on AppSec role: you’ll review code, find real vulnerabilities and drive fixes across the stack. You’ll be the main security person in the company, reporting directly to our CTO and Co-Founder. You’ll set direction yourself and explain risk clearly to non-security colleagues. Our product includes AI-generated content, including NSFW content, and you’ll also keep an eye on AI-specific threats like prompt injection. Real ownership from day one. This isn’t an infrastructure, networking or DevSecOps role: we’re looking for application security depth. KEY RESPONSIBILITIES APPLICATION SECURITY (THE CORE OF THE ROLE) - Review code every week to catch vulnerabilities before they ship - Find, prioritize and drive fixes for real vulnerabilities across the stack, not surface-level issues AUDITS AND PENTESTS - Coordinate external security audits and penetration tests - Challenge findings where needed, and follow them through to fixes ENGINEERING AND AUTOMATION - Automate security work and build the tools you need to scale it - Use AI tools daily in your security work: code review, pentests and scripting OWNERSHIP AND COMMUNICATION - Own security end to end with little support, and decide what matters most - Explain technical risk in plain words to the team and leadership - Cover security alerts, including occasional night and weekend on-call ALSO PART OF THE ROLE (LIGHTER) - Keep a simple risk register and GRC documentation up to date - Share security updates with the team and run awareness training - Watch emerging AI threats (prompt injection, jailbreaks, content filter bypass) and incidents at our AI providers YOUR QUALIFICATIONS MUST-HAVES - 2+ years of hands-on security experience - Hands-on AppSec, not compliance only: you review code regularly and can walk us through a real vulnerability you found and fixed - Audits and pentests: you’ve coordinated an external audit or pentest and followed the findings through to fixes - Engineering workflows: you ship code with Git/GitHub, script in Python or Bash, and have recent hands-on work on a modern web stack (e.g. Rails, Node; GCP, Heroku or similar) - Ownership with little support: you’ve been the sole or lead security person, or owned a security area on your own. You’ve reviewed code or tested systems every week in the last 2 years, and you explain risk clearly to non-technical people - AI in your daily work: you use AI tools every day in your security work - A hacker mindset: You love breaking things to make them safer, and security isn’t only your job: you do it for fun too, through bug bounties, CTFs, research, write-ups or your own tools. NICE-TO-HAVES - ⭐ AI/LLM security testing (prompt injection, jailbreaking): a strong plus - Experience at an AI company or a scale-up - GRC awareness - Familiarity with MDM and access management SOFT SKILLS 🗣 Strong communication & collaborative skills (perfectly fluent in English) 🧢 Goal-orientated, ownership and commitment ⚡️ Doer mindset - we are moving fast and we need people who can find the right balance between executing, planning and strategy 🧢 Humble - willing to learn, open to feedback 🍭 #NSFW - you are comfortable working in an environment with products that are based on uncensored models and content WHY EVERAI? 📈 Exponential Growth: From 50M users in 2 years, to 100M next — and 500M beyond 🚀 Track Record of Category-Creating Innovation: We consistently launch world-first AI applications — setting the pace, not following it 🌍 Global Impact: Top-tier user growth, real-world adoption, and cultural relevance 🧠 Proven Leadership: A senior team that’s launched, scaled, and exited & IPO’d multiple scale ups — now fully focused on reshaping AI companionship 👥 Elite Remote Team: 100% remote and built to win — world-class talent from Tier 1 tech companies, with a culture of ownership, velocity, and radical creativity 🛡️ Ethical Core: Our AI ecosystem is governed by EverGuard, our proprietary AI moderation technology, ensuring responsible development at scale WHAT WE OFFER ✍️ Contract Type: We prefer B2B, but we’re flexible, what matters is long-term commitment and impact 📍 Work From Anywhere: Fully remote. Choose the environment where you do your best work 🏝️ Paid Time Off: 4 weeks (20 working days) of PTO per year to recharge and reset 👨‍👩‍👧‍👦 Annual Gathering: A yearly in-person meetup to connect, brainstorm, and celebrate wins together ❤️‍🩹 Health & Wellness Support: Monthly allowance of 100 USD for health insurance expenses & access to unlimited 1:1 sessions with psychologists and lifestyle experts through OpenUp (also available to up to three of your family members) 🏢 Co-Working Space Budget: Work from a co-working space up to twice per month (35 EUR / 40 USD per visit) to stay inspired and connected 📚 Learning Budget: Dedicated funds to support your professional growth: courses, books, conferences, events, or certifications 💻 Company Laptop & Equipment: Laptop provided + monitor budget up to 250 USD + keyboard/mouse/mic/headphones budget up to 150 USD ⚡ AI Tools Access: Premium access to ChatGPT, Hugging Face, Claude Code, and any other tool needed to excel at your job, power your ideas and workflows 🎯 TOP TIER TALENT IS OUR MULTIPLIER We’re a fully remote group of A-players from Tier 1 tech, led by an exec team who’ve launched, scaled, and exited multiple companies. We move fast, and care deeply about what we build — and who we build it with. We’re looking for exceptional talent ready to ship & distribute world-first AI products at scale, fast, and co-create with us this category-defining business. If that’s you — reach out and apply!

Location: Germany Workplace: Remote OUR VISION & PRODUCTS 🚀 EverAI — Building the Future of AI Companionship One of the Top 15 Largest & Fastest-Growing AI Companies in the World 50 Million Users in 2 years — Help Us Reach 100M first, 500M next At EverAI, we’re shaping what it means to connect with AI. With 50 million users and counting, we're not just building products — we're creating entirely new categories. Our flagship product is the world’s largest AI companionship platform, redefining relationships for millions. It is governed by our proprietary moderation system, EverGuard — an internal AI designed to ensure everything we build is safe, ethical, and human-first. And we’re only just getting started! OUR TEAM We are an enthusiastic, passionate and hardworking team of ≈ 100 people. Our founding team has strong entrepreneurial experience building and scaling web products from 0 to IPO. Alexis Soulopoulos [CEO] • 10+ years in Tech Executive Leadership • Co-Founder Mad Paws Holdings (from 0 to IPO) • Forbes 30 under 30 + Deloitte TechFast50 ’22 & ‘23 Michael Monin [Co-founder & CTO] • 10+ years as CTO / COO (web2/web3), 3 years in AI/LLM • Serial-entrepreneur: MTK Digital (exited / 0->$20m revenue) and Zipchat (AI Chatbot for E-commerce brands) Thomas Lacroix [Co-founder & CMO] • 8+ years in Customer Acquisition & E-commerce Growth • Serial-entrepreneur: Curatible (sold to Blackstone) and MTK Digital (exited / 0->$20m revenue) Maruša Fasano [CFO/Legal] • 25+ years in Finance, Strategy, M&A • Ex-CFO/M&A @Curatible (exited to Blackstone) • Ex-President of the Board @SotremoSA (exited) • Co-founder/CFO @SoftOne (exited) YOUR ROLE As a Security Engineer, you’ll own application security for a fast-growing AI companionship platform. This is a hands-on AppSec role: you’ll review code, find real vulnerabilities and drive fixes across the stack. You’ll be the main security person in the company, reporting directly to our CTO and Co-Founder. You’ll set direction yourself and explain risk clearly to non-security colleagues. Our product includes AI-generated content, including NSFW content, and you’ll also keep an eye on AI-specific threats like prompt injection. Real ownership from day one. This isn’t an infrastructure, networking or DevSecOps role: we’re looking for application security depth. KEY RESPONSIBILITIES APPLICATION SECURITY (THE CORE OF THE ROLE) - Review code every week to catch vulnerabilities before they ship - Find, prioritize and drive fixes for real vulnerabilities across the stack, not surface-level issues AUDITS AND PENTESTS - Coordinate external security audits and penetration tests - Challenge findings where needed, and follow them through to fixes ENGINEERING AND AUTOMATION - Automate security work and build the tools you need to scale it - Use AI tools daily in your security work: code review, pentests and scripting OWNERSHIP AND COMMUNICATION - Own security end to end with little support, and decide what matters most - Explain technical risk in plain words to the team and leadership - Cover security alerts, including occasional night and weekend on-call ALSO PART OF THE ROLE (LIGHTER) - Keep a simple risk register and GRC documentation up to date - Share security updates with the team and run awareness training - Watch emerging AI threats (prompt injection, jailbreaks, content filter bypass) and incidents at our AI providers YOUR QUALIFICATIONS MUST-HAVES - 2+ years of hands-on security experience - Hands-on AppSec, not compliance only: you review code regularly and can walk us through a real vulnerability you found and fixed - Audits and pentests: you’ve coordinated an external audit or pentest and followed the findings through to fixes - Engineering workflows: you ship code with Git/GitHub, script in Python or Bash, and have recent hands-on work on a modern web stack (e.g. Rails, Node; GCP, Heroku or similar) - Ownership with little support: you’ve been the sole or lead security person, or owned a security area on your own. You’ve reviewed code or tested systems every week in the last 2 years, and you explain risk clearly to non-technical people - AI in your daily work: you use AI tools every day in your security work - A hacker mindset: You love breaking things to make them safer, and security isn’t only your job: you do it for fun too, through bug bounties, CTFs, research, write-ups or your own tools. NICE-TO-HAVES - ⭐ AI/LLM security testing (prompt injection, jailbreaking): a strong plus - Experience at an AI company or a scale-up - GRC awareness - Familiarity with MDM and access management SOFT SKILLS 🗣 Strong communication & collaborative skills (perfectly fluent in English) 🧢 Goal-orientated, ownership and commitment ⚡️ Doer mindset - we are moving fast and we need people who can find the right balance between executing, planning and strategy 🧢 Humble - willing to learn, open to feedback 🍭 #NSFW - you are comfortable working in an environment with products that are based on uncensored models and content WHY EVERAI? 📈 Exponential Growth: From 50M users in 2 years, to 100M next — and 500M beyond 🚀 Track Record of Category-Creating Innovation: We consistently launch world-first AI applications — setting the pace, not following it 🌍 Global Impact: Top-tier user growth, real-world adoption, and cultural relevance 🧠 Proven Leadership: A senior team that’s launched, scaled, and exited & IPO’d multiple scale ups — now fully focused on reshaping AI companionship 👥 Elite Remote Team: 100% remote and built to win — world-class talent from Tier 1 tech companies, with a culture of ownership, velocity, and radical creativity 🛡️ Ethical Core: Our AI ecosystem is governed by EverGuard, our proprietary AI moderation technology, ensuring responsible development at scale WHAT WE OFFER ✍️ Contract Type: We prefer B2B, but we’re flexible, what matters is long-term commitment and impact 📍 Work From Anywhere: Fully remote. Choose the environment where you do your best work 🏝️ Paid Time Off: 4 weeks (20 working days) of PTO per year to recharge and reset 👨‍👩‍👧‍👦 Annual Gathering: A yearly in-person meetup to connect, brainstorm, and celebrate wins together ❤️‍🩹 Health & Wellness Support: Monthly allowance of 100 USD for health insurance expenses & access to unlimited 1:1 sessions with psychologists and lifestyle experts through OpenUp (also available to up to three of your family members) 🏢 Co-Working Space Budget: Work from a co-working space up to twice per month (35 EUR / 40 USD per visit) to stay inspired and connected 📚 Learning Budget: Dedicated funds to support your professional growth: courses, books, conferences, events, or certifications 💻 Company Laptop & Equipment: Laptop provided + monitor budget up to 250 USD + keyboard/mouse/mic/headphones budget up to 150 USD ⚡ AI Tools Access: Premium access to ChatGPT, Hugging Face, Claude Code, and any other tool needed to excel at your job, power your ideas and workflows 🎯 TOP TIER TALENT IS OUR MULTIPLIER We’re a fully remote group of A-players from Tier 1 tech, led by an exec team who’ve launched, scaled, and exited multiple companies. We move fast, and care deeply about what we build — and who we build it with. We’re looking for exceptional talent ready to ship & distribute world-first AI products at scale, fast, and co-create with us this category-defining business. If that’s you — reach out and apply!

Location: Austria Workplace: Remote OUR VISION & PRODUCTS 🚀 EverAI — Building the Future of AI Companionship One of the Top 15 Largest & Fastest-Growing AI Companies in the World 50 Million Users in 2 years — Help Us Reach 100M first, 500M next At EverAI, we’re shaping what it means to connect with AI. With 50 million users and counting, we're not just building products — we're creating entirely new categories. Our flagship product is the world’s largest AI companionship platform, redefining relationships for millions. It is governed by our proprietary moderation system, EverGuard — an internal AI designed to ensure everything we build is safe, ethical, and human-first. And we’re only just getting started! OUR TEAM We are an enthusiastic, passionate and hardworking team of ≈ 100 people. Our founding team has strong entrepreneurial experience building and scaling web products from 0 to IPO. Alexis Soulopoulos [CEO] • 10+ years in Tech Executive Leadership • Co-Founder Mad Paws Holdings (from 0 to IPO) • Forbes 30 under 30 + Deloitte TechFast50 ’22 & ‘23 Michael Monin [Co-founder & CTO] • 10+ years as CTO / COO (web2/web3), 3 years in AI/LLM • Serial-entrepreneur: MTK Digital (exited / 0->$20m revenue) and Zipchat (AI Chatbot for E-commerce brands) Thomas Lacroix [Co-founder & CMO] • 8+ years in Customer Acquisition & E-commerce Growth • Serial-entrepreneur: Curatible (sold to Blackstone) and MTK Digital (exited / 0->$20m revenue) Maruša Fasano [CFO/Legal] • 25+ years in Finance, Strategy, M&A • Ex-CFO/M&A @Curatible (exited to Blackstone) • Ex-President of the Board @SotremoSA (exited) • Co-founder/CFO @SoftOne (exited) YOUR ROLE As a Security Engineer, you’ll own application security for a fast-growing AI companionship platform. This is a hands-on AppSec role: you’ll review code, find real vulnerabilities and drive fixes across the stack. You’ll be the main security person in the company, reporting directly to our CTO and Co-Founder. You’ll set direction yourself and explain risk clearly to non-security colleagues. Our product includes AI-generated content, including NSFW content, and you’ll also keep an eye on AI-specific threats like prompt injection. Real ownership from day one. This isn’t an infrastructure, networking or DevSecOps role: we’re looking for application security depth. KEY RESPONSIBILITIES APPLICATION SECURITY (THE CORE OF THE ROLE) - Review code every week to catch vulnerabilities before they ship - Find, prioritize and drive fixes for real vulnerabilities across the stack, not surface-level issues AUDITS AND PENTESTS - Coordinate external security audits and penetration tests - Challenge findings where needed, and follow them through to fixes ENGINEERING AND AUTOMATION - Automate security work and build the tools you need to scale it - Use AI tools daily in your security work: code review, pentests and scripting OWNERSHIP AND COMMUNICATION - Own security end to end with little support, and decide what matters most - Explain technical risk in plain words to the team and leadership - Cover security alerts, including occasional night and weekend on-call ALSO PART OF THE ROLE (LIGHTER) - Keep a simple risk register and GRC documentation up to date - Share security updates with the team and run awareness training - Watch emerging AI threats (prompt injection, jailbreaks, content filter bypass) and incidents at our AI providers YOUR QUALIFICATIONS MUST-HAVES - 2+ years of hands-on security experience - Hands-on AppSec, not compliance only: you review code regularly and can walk us through a real vulnerability you found and fixed - Audits and pentests: you’ve coordinated an external audit or pentest and followed the findings through to fixes - Engineering workflows: you ship code with Git/GitHub, script in Python or Bash, and have recent hands-on work on a modern web stack (e.g. Rails, Node; GCP, Heroku or similar) - Ownership with little support: you’ve been the sole or lead security person, or owned a security area on your own. You’ve reviewed code or tested systems every week in the last 2 years, and you explain risk clearly to non-technical people - AI in your daily work: you use AI tools every day in your security work - A hacker mindset: You love breaking things to make them safer, and security isn’t only your job: you do it for fun too, through bug bounties, CTFs, research, write-ups or your own tools. NICE-TO-HAVES - ⭐ AI/LLM security testing (prompt injection, jailbreaking): a strong plus - Experience at an AI company or a scale-up - GRC awareness - Familiarity with MDM and access management SOFT SKILLS 🗣 Strong communication & collaborative skills (perfectly fluent in English) 🧢 Goal-orientated, ownership and commitment ⚡️ Doer mindset - we are moving fast and we need people who can find the right balance between executing, planning and strategy 🧢 Humble - willing to learn, open to feedback 🍭 #NSFW - you are comfortable working in an environment with products that are based on uncensored models and content WHY EVERAI? 📈 Exponential Growth: From 50M users in 2 years, to 100M next — and 500M beyond 🚀 Track Record of Category-Creating Innovation: We consistently launch world-first AI applications — setting the pace, not following it 🌍 Global Impact: Top-tier user growth, real-world adoption, and cultural relevance 🧠 Proven Leadership: A senior team that’s launched, scaled, and exited & IPO’d multiple scale ups — now fully focused on reshaping AI companionship 👥 Elite Remote Team: 100% remote and built to win — world-class talent from Tier 1 tech companies, with a culture of ownership, velocity, and radical creativity 🛡️ Ethical Core: Our AI ecosystem is governed by EverGuard, our proprietary AI moderation technology, ensuring responsible development at scale WHAT WE OFFER ✍️ Contract Type: We prefer B2B, but we’re flexible, what matters is long-term commitment and impact 📍 Work From Anywhere: Fully remote. Choose the environment where you do your best work 🏝️ Paid Time Off: 4 weeks (20 working days) of PTO per year to recharge and reset 👨‍👩‍👧‍👦 Annual Gathering: A yearly in-person meetup to connect, brainstorm, and celebrate wins together ❤️‍🩹 Health & Wellness Support: Monthly allowance of 100 USD for health insurance expenses & access to unlimited 1:1 sessions with psychologists and lifestyle experts through OpenUp (also available to up to three of your family members) 🏢 Co-Working Space Budget: Work from a co-working space up to twice per month (35 EUR / 40 USD per visit) to stay inspired and connected 📚 Learning Budget: Dedicated funds to support your professional growth: courses, books, conferences, events, or certifications 💻 Company Laptop & Equipment: Laptop provided + monitor budget up to 250 USD + keyboard/mouse/mic/headphones budget up to 150 USD ⚡ AI Tools Access: Premium access to ChatGPT, Hugging Face, Claude Code, and any other tool needed to excel at your job, power your ideas and workflows 🎯 TOP TIER TALENT IS OUR MULTIPLIER We’re a fully remote group of A-players from Tier 1 tech, led by an exec team who’ve launched, scaled, and exited multiple companies. We move fast, and care deeply about what we build — and who we build it with. We’re looking for exceptional talent ready to ship & distribute world-first AI products at scale, fast, and co-create with us this category-defining business. If that’s you — reach out and apply!

Location: Croatia Workplace: Remote OUR VISION & PRODUCTS 🚀 EverAI — Building the Future of AI Companionship One of the Top 15 Largest & Fastest-Growing AI Companies in the World 50 Million Users in 2 years — Help Us Reach 100M first, 500M next At EverAI, we’re shaping what it means to connect with AI. With 50 million users and counting, we're not just building products — we're creating entirely new categories. Our flagship product is the world’s largest AI companionship platform, redefining relationships for millions. It is governed by our proprietary moderation system, EverGuard — an internal AI designed to ensure everything we build is safe, ethical, and human-first. And we’re only just getting started! OUR TEAM We are an enthusiastic, passionate and hardworking team of ≈ 100 people. Our founding team has strong entrepreneurial experience building and scaling web products from 0 to IPO. Alexis Soulopoulos [CEO] • 10+ years in Tech Executive Leadership • Co-Founder Mad Paws Holdings (from 0 to IPO) • Forbes 30 under 30 + Deloitte TechFast50 ’22 & ‘23 Michael Monin [Co-founder & CTO] • 10+ years as CTO / COO (web2/web3), 3 years in AI/LLM • Serial-entrepreneur: MTK Digital (exited / 0->$20m revenue) and Zipchat (AI Chatbot for E-commerce brands) Thomas Lacroix [Co-founder & CMO] • 8+ years in Customer Acquisition & E-commerce Growth • Serial-entrepreneur: Curatible (sold to Blackstone) and MTK Digital (exited / 0->$20m revenue) Maruša Fasano [CFO/Legal] • 25+ years in Finance, Strategy, M&A • Ex-CFO/M&A @Curatible (exited to Blackstone) • Ex-President of the Board @SotremoSA (exited) • Co-founder/CFO @SoftOne (exited) YOUR ROLE As a Security Engineer, you’ll own application security for a fast-growing AI companionship platform. This is a hands-on AppSec role: you’ll review code, find real vulnerabilities and drive fixes across the stack. You’ll be the main security person in the company, reporting directly to our CTO and Co-Founder. You’ll set direction yourself and explain risk clearly to non-security colleagues. Our product includes AI-generated content, including NSFW content, and you’ll also keep an eye on AI-specific threats like prompt injection. Real ownership from day one. This isn’t an infrastructure, networking or DevSecOps role: we’re looking for application security depth. KEY RESPONSIBILITIES APPLICATION SECURITY (THE CORE OF THE ROLE) - Review code every week to catch vulnerabilities before they ship - Find, prioritize and drive fixes for real vulnerabilities across the stack, not surface-level issues AUDITS AND PENTESTS - Coordinate external security audits and penetration tests - Challenge findings where needed, and follow them through to fixes ENGINEERING AND AUTOMATION - Automate security work and build the tools you need to scale it - Use AI tools daily in your security work: code review, pentests and scripting OWNERSHIP AND COMMUNICATION - Own security end to end with little support, and decide what matters most - Explain technical risk in plain words to the team and leadership - Cover security alerts, including occasional night and weekend on-call ALSO PART OF THE ROLE (LIGHTER) - Keep a simple risk register and GRC documentation up to date - Share security updates with the team and run awareness training - Watch emerging AI threats (prompt injection, jailbreaks, content filter bypass) and incidents at our AI providers YOUR QUALIFICATIONS MUST-HAVES - 2+ years of hands-on security experience - Hands-on AppSec, not compliance only: you review code regularly and can walk us through a real vulnerability you found and fixed - Audits and pentests: you’ve coordinated an external audit or pentest and followed the findings through to fixes - Engineering workflows: you ship code with Git/GitHub, script in Python or Bash, and have recent hands-on work on a modern web stack (e.g. Rails, Node; GCP, Heroku or similar) - Ownership with little support: you’ve been the sole or lead security person, or owned a security area on your own. You’ve reviewed code or tested systems every week in the last 2 years, and you explain risk clearly to non-technical people - AI in your daily work: you use AI tools every day in your security work - A hacker mindset: You love breaking things to make them safer, and security isn’t only your job: you do it for fun too, through bug bounties, CTFs, research, write-ups or your own tools. NICE-TO-HAVES - ⭐ AI/LLM security testing (prompt injection, jailbreaking): a strong plus - Experience at an AI company or a scale-up - GRC awareness - Familiarity with MDM and access management SOFT SKILLS 🗣 Strong communication & collaborative skills (perfectly fluent in English) 🧢 Goal-orientated, ownership and commitment ⚡️ Doer mindset - we are moving fast and we need people who can find the right balance between executing, planning and strategy 🧢 Humble - willing to learn, open to feedback 🍭 #NSFW - you are comfortable working in an environment with products that are based on uncensored models and content WHY EVERAI? 📈 Exponential Growth: From 50M users in 2 years, to 100M next — and 500M beyond 🚀 Track Record of Category-Creating Innovation: We consistently launch world-first AI applications — setting the pace, not following it 🌍 Global Impact: Top-tier user growth, real-world adoption, and cultural relevance 🧠 Proven Leadership: A senior team that’s launched, scaled, and exited & IPO’d multiple scale ups — now fully focused on reshaping AI companionship 👥 Elite Remote Team: 100% remote and built to win — world-class talent from Tier 1 tech companies, with a culture of ownership, velocity, and radical creativity 🛡️ Ethical Core: Our AI ecosystem is governed by EverGuard, our proprietary AI moderation technology, ensuring responsible development at scale WHAT WE OFFER ✍️ Contract Type: We prefer B2B, but we’re flexible, what matters is long-term commitment and impact 📍 Work From Anywhere: Fully remote. Choose the environment where you do your best work 🏝️ Paid Time Off: 4 weeks (20 working days) of PTO per year to recharge and reset 👨‍👩‍👧‍👦 Annual Gathering: A yearly in-person meetup to connect, brainstorm, and celebrate wins together ❤️‍🩹 Health & Wellness Support: Monthly allowance of 100 USD for health insurance expenses & access to unlimited 1:1 sessions with psychologists and lifestyle experts through OpenUp (also available to up to three of your family members) 🏢 Co-Working Space Budget: Work from a co-working space up to twice per month (35 EUR / 40 USD per visit) to stay inspired and connected 📚 Learning Budget: Dedicated funds to support your professional growth: courses, books, conferences, events, or certifications 💻 Company Laptop & Equipment: Laptop provided + monitor budget up to 250 USD + keyboard/mouse/mic/headphones budget up to 150 USD ⚡ AI Tools Access: Premium access to ChatGPT, Hugging Face, Claude Code, and any other tool needed to excel at your job, power your ideas and workflows 🎯 TOP TIER TALENT IS OUR MULTIPLIER We’re a fully remote group of A-players from Tier 1 tech, led by an exec team who’ve launched, scaled, and exited multiple companies. We move fast, and care deeply about what we build — and who we build it with. We’re looking for exceptional talent ready to ship & distribute world-first AI products at scale, fast, and co-create with us this category-defining business. If that’s you — reach out and apply!

Location: Netherlands Workplace: Remote OUR VISION & PRODUCTS 🚀 EverAI — Building the Future of AI Companionship One of the Top 15 Largest & Fastest-Growing AI Companies in the World 50 Million Users in 2 years — Help Us Reach 100M first, 500M next At EverAI, we’re shaping what it means to connect with AI. With 50 million users and counting, we're not just building products — we're creating entirely new categories. Our flagship product is the world’s largest AI companionship platform, redefining relationships for millions. It is governed by our proprietary moderation system, EverGuard — an internal AI designed to ensure everything we build is safe, ethical, and human-first. And we’re only just getting started! OUR TEAM We are an enthusiastic, passionate and hardworking team of ≈ 100 people. Our founding team has strong entrepreneurial experience building and scaling web products from 0 to IPO. Alexis Soulopoulos [CEO] • 10+ years in Tech Executive Leadership • Co-Founder Mad Paws Holdings (from 0 to IPO) • Forbes 30 under 30 + Deloitte TechFast50 ’22 & ‘23 Michael Monin [Co-founder & CTO] • 10+ years as CTO / COO (web2/web3), 3 years in AI/LLM • Serial-entrepreneur: MTK Digital (exited / 0->$20m revenue) and Zipchat (AI Chatbot for E-commerce brands) Thomas Lacroix [Co-founder & CMO] • 8+ years in Customer Acquisition & E-commerce Growth • Serial-entrepreneur: Curatible (sold to Blackstone) and MTK Digital (exited / 0->$20m revenue) Maruša Fasano [CFO/Legal] • 25+ years in Finance, Strategy, M&A • Ex-CFO/M&A @Curatible (exited to Blackstone) • Ex-President of the Board @SotremoSA (exited) • Co-founder/CFO @SoftOne (exited) YOUR ROLE As a Security Engineer, you’ll own application security for a fast-growing AI companionship platform. This is a hands-on AppSec role: you’ll review code, find real vulnerabilities and drive fixes across the stack. You’ll be the main security person in the company, reporting directly to our CTO and Co-Founder. You’ll set direction yourself and explain risk clearly to non-security colleagues. Our product includes AI-generated content, including NSFW content, and you’ll also keep an eye on AI-specific threats like prompt injection. Real ownership from day one. This isn’t an infrastructure, networking or DevSecOps role: we’re looking for application security depth. KEY RESPONSIBILITIES APPLICATION SECURITY (THE CORE OF THE ROLE) - Review code every week to catch vulnerabilities before they ship - Find, prioritize and drive fixes for real vulnerabilities across the stack, not surface-level issues AUDITS AND PENTESTS - Coordinate external security audits and penetration tests - Challenge findings where needed, and follow them through to fixes ENGINEERING AND AUTOMATION - Automate security work and build the tools you need to scale it - Use AI tools daily in your security work: code review, pentests and scripting OWNERSHIP AND COMMUNICATION - Own security end to end with little support, and decide what matters most - Explain technical risk in plain words to the team and leadership - Cover security alerts, including occasional night and weekend on-call ALSO PART OF THE ROLE (LIGHTER) - Keep a simple risk register and GRC documentation up to date - Share security updates with the team and run awareness training - Watch emerging AI threats (prompt injection, jailbreaks, content filter bypass) and incidents at our AI providers YOUR QUALIFICATIONS MUST-HAVES - 2+ years of hands-on security experience - Hands-on AppSec, not compliance only: you review code regularly and can walk us through a real vulnerability you found and fixed - Audits and pentests: you’ve coordinated an external audit or pentest and followed the findings through to fixes - Engineering workflows: you ship code with Git/GitHub, script in Python or Bash, and have recent hands-on work on a modern web stack (e.g. Rails, Node; GCP, Heroku or similar) - Ownership with little support: you’ve been the sole or lead security person, or owned a security area on your own. You’ve reviewed code or tested systems every week in the last 2 years, and you explain risk clearly to non-technical people - AI in your daily work: you use AI tools every day in your security work - A hacker mindset: You love breaking things to make them safer, and security isn’t only your job: you do it for fun too, through bug bounties, CTFs, research, write-ups or your own tools. NICE-TO-HAVES - ⭐ AI/LLM security testing (prompt injection, jailbreaking): a strong plus - Experience at an AI company or a scale-up - GRC awareness - Familiarity with MDM and access management SOFT SKILLS 🗣 Strong communication & collaborative skills (perfectly fluent in English) 🧢 Goal-orientated, ownership and commitment ⚡️ Doer mindset - we are moving fast and we need people who can find the right balance between executing, planning and strategy 🧢 Humble - willing to learn, open to feedback 🍭 #NSFW - you are comfortable working in an environment with products that are based on uncensored models and content WHY EVERAI? 📈 Exponential Growth: From 50M users in 2 years, to 100M next — and 500M beyond 🚀 Track Record of Category-Creating Innovation: We consistently launch world-first AI applications — setting the pace, not following it 🌍 Global Impact: Top-tier user growth, real-world adoption, and cultural relevance 🧠 Proven Leadership: A senior team that’s launched, scaled, and exited & IPO’d multiple scale ups — now fully focused on reshaping AI companionship 👥 Elite Remote Team: 100% remote and built to win — world-class talent from Tier 1 tech companies, with a culture of ownership, velocity, and radical creativity 🛡️ Ethical Core: Our AI ecosystem is governed by EverGuard, our proprietary AI moderation technology, ensuring responsible development at scale WHAT WE OFFER ✍️ Contract Type: We prefer B2B, but we’re flexible, what matters is long-term commitment and impact 📍 Work From Anywhere: Fully remote. Choose the environment where you do your best work 🏝️ Paid Time Off: 4 weeks (20 working days) of PTO per year to recharge and reset 👨‍👩‍👧‍👦 Annual Gathering: A yearly in-person meetup to connect, brainstorm, and celebrate wins together ❤️‍🩹 Health & Wellness Support: Monthly allowance of 100 USD for health insurance expenses & access to unlimited 1:1 sessions with psychologists and lifestyle experts through OpenUp (also available to up to three of your family members) 🏢 Co-Working Space Budget: Work from a co-working space up to twice per month (35 EUR / 40 USD per visit) to stay inspired and connected 📚 Learning Budget: Dedicated funds to support your professional growth: courses, books, conferences, events, or certifications 💻 Company Laptop & Equipment: Laptop provided + monitor budget up to 250 USD + keyboard/mouse/mic/headphones budget up to 150 USD ⚡ AI Tools Access: Premium access to ChatGPT, Hugging Face, Claude Code, and any other tool needed to excel at your job, power your ideas and workflows 🎯 TOP TIER TALENT IS OUR MULTIPLIER We’re a fully remote group of A-players from Tier 1 tech, led by an exec team who’ve launched, scaled, and exited multiple companies. We move fast, and care deeply about what we build — and who we build it with. We’re looking for exceptional talent ready to ship & distribute world-first AI products at scale, fast, and co-create with us this category-defining business. If that’s you — reach out and apply!

Location: Denmark Workplace: Remote OUR VISION & PRODUCTS 🚀 EverAI — Building the Future of AI Companionship One of the Top 15 Largest & Fastest-Growing AI Companies in the World 50 Million Users in 2 years — Help Us Reach 100M first, 500M next At EverAI, we’re shaping what it means to connect with AI. With 50 million users and counting, we're not just building products — we're creating entirely new categories. Our flagship product is the world’s largest AI companionship platform, redefining relationships for millions. It is governed by our proprietary moderation system, EverGuard — an internal AI designed to ensure everything we build is safe, ethical, and human-first. And we’re only just getting started! OUR TEAM We are an enthusiastic, passionate and hardworking team of ≈ 100 people. Our founding team has strong entrepreneurial experience building and scaling web products from 0 to IPO. Alexis Soulopoulos [CEO] • 10+ years in Tech Executive Leadership • Co-Founder Mad Paws Holdings (from 0 to IPO) • Forbes 30 under 30 + Deloitte TechFast50 ’22 & ‘23 Michael Monin [Co-founder & CTO] • 10+ years as CTO / COO (web2/web3), 3 years in AI/LLM • Serial-entrepreneur: MTK Digital (exited / 0->$20m revenue) and Zipchat (AI Chatbot for E-commerce brands) Thomas Lacroix [Co-founder & CMO] • 8+ years in Customer Acquisition & E-commerce Growth • Serial-entrepreneur: Curatible (sold to Blackstone) and MTK Digital (exited / 0->$20m revenue) Maruša Fasano [CFO/Legal] • 25+ years in Finance, Strategy, M&A • Ex-CFO/M&A @Curatible (exited to Blackstone) • Ex-President of the Board @SotremoSA (exited) • Co-founder/CFO @SoftOne (exited) YOUR ROLE As a Security Engineer, you’ll own application security for a fast-growing AI companionship platform. This is a hands-on AppSec role: you’ll review code, find real vulnerabilities and drive fixes across the stack. You’ll be the main security person in the company, reporting directly to our CTO and Co-Founder. You’ll set direction yourself and explain risk clearly to non-security colleagues. Our product includes AI-generated content, including NSFW content, and you’ll also keep an eye on AI-specific threats like prompt injection. Real ownership from day one. This isn’t an infrastructure, networking or DevSecOps role: we’re looking for application security depth. KEY RESPONSIBILITIES APPLICATION SECURITY (THE CORE OF THE ROLE) - Review code every week to catch vulnerabilities before they ship - Find, prioritize and drive fixes for real vulnerabilities across the stack, not surface-level issues AUDITS AND PENTESTS - Coordinate external security audits and penetration tests - Challenge findings where needed, and follow them through to fixes ENGINEERING AND AUTOMATION - Automate security work and build the tools you need to scale it - Use AI tools daily in your security work: code review, pentests and scripting OWNERSHIP AND COMMUNICATION - Own security end to end with little support, and decide what matters most - Explain technical risk in plain words to the team and leadership - Cover security alerts, including occasional night and weekend on-call ALSO PART OF THE ROLE (LIGHTER) - Keep a simple risk register and GRC documentation up to date - Share security updates with the team and run awareness training - Watch emerging AI threats (prompt injection, jailbreaks, content filter bypass) and incidents at our AI providers YOUR QUALIFICATIONS MUST-HAVES - 2+ years of hands-on security experience - Hands-on AppSec, not compliance only: you review code regularly and can walk us through a real vulnerability you found and fixed - Audits and pentests: you’ve coordinated an external audit or pentest and followed the findings through to fixes - Engineering workflows: you ship code with Git/GitHub, script in Python or Bash, and have recent hands-on work on a modern web stack (e.g. Rails, Node; GCP, Heroku or similar) - Ownership with little support: you’ve been the sole or lead security person, or owned a security area on your own. You’ve reviewed code or tested systems every week in the last 2 years, and you explain risk clearly to non-technical people - AI in your daily work: you use AI tools every day in your security work - A hacker mindset: You love breaking things to make them safer, and security isn’t only your job: you do it for fun too, through bug bounties, CTFs, research, write-ups or your own tools. NICE-TO-HAVES - ⭐ AI/LLM security testing (prompt injection, jailbreaking): a strong plus - Experience at an AI company or a scale-up - GRC awareness - Familiarity with MDM and access management SOFT SKILLS 🗣 Strong communication & collaborative skills (perfectly fluent in English) 🧢 Goal-orientated, ownership and commitment ⚡️ Doer mindset - we are moving fast and we need people who can find the right balance between executing, planning and strategy 🧢 Humble - willing to learn, open to feedback 🍭 #NSFW - you are comfortable working in an environment with products that are based on uncensored models and content WHY EVERAI? 📈 Exponential Growth: From 50M users in 2 years, to 100M next — and 500M beyond 🚀 Track Record of Category-Creating Innovation: We consistently launch world-first AI applications — setting the pace, not following it 🌍 Global Impact: Top-tier user growth, real-world adoption, and cultural relevance 🧠 Proven Leadership: A senior team that’s launched, scaled, and exited & IPO’d multiple scale ups — now fully focused on reshaping AI companionship 👥 Elite Remote Team: 100% remote and built to win — world-class talent from Tier 1 tech companies, with a culture of ownership, velocity, and radical creativity 🛡️ Ethical Core: Our AI ecosystem is governed by EverGuard, our proprietary AI moderation technology, ensuring responsible development at scale WHAT WE OFFER ✍️ Contract Type: We prefer B2B, but we’re flexible, what matters is long-term commitment and impact 📍 Work From Anywhere: Fully remote. Choose the environment where you do your best work 🏝️ Paid Time Off: 4 weeks (20 working days) of PTO per year to recharge and reset 👨‍👩‍👧‍👦 Annual Gathering: A yearly in-person meetup to connect, brainstorm, and celebrate wins together ❤️‍🩹 Health & Wellness Support: Monthly allowance of 100 USD for health insurance expenses & access to unlimited 1:1 sessions with psychologists and lifestyle experts through OpenUp (also available to up to three of your family members) 🏢 Co-Working Space Budget: Work from a co-working space up to twice per month (35 EUR / 40 USD per visit) to stay inspired and connected 📚 Learning Budget: Dedicated funds to support your professional growth: courses, books, conferences, events, or certifications 💻 Company Laptop & Equipment: Laptop provided + monitor budget up to 250 USD + keyboard/mouse/mic/headphones budget up to 150 USD ⚡ AI Tools Access: Premium access to ChatGPT, Hugging Face, Claude Code, and any other tool needed to excel at your job, power your ideas and workflows 🎯 TOP TIER TALENT IS OUR MULTIPLIER We’re a fully remote group of A-players from Tier 1 tech, led by an exec team who’ve launched, scaled, and exited multiple companies. We move fast, and care deeply about what we build — and who we build it with. We’re looking for exceptional talent ready to ship & distribute world-first AI products at scale, fast, and co-create with us this category-defining business. If that’s you — reach out and apply!

Location: Europe Workplace: Remote OUR VISION & PRODUCTS 🚀 EverAI — Building the Future of AI Companionship One of the Top 15 Largest & Fastest-Growing AI Companies in the World 50 Million Users in 2 years — Help Us Reach 100M first, 500M next At EverAI, we’re shaping what it means to connect with AI. With 50 million users and counting, we're not just building products — we're creating entirely new categories. Our flagship product is the world’s largest AI companionship platform, redefining relationships for millions. It is governed by our proprietary moderation system, EverGuard — an internal AI designed to ensure everything we build is safe, ethical, and human-first. And we’re only just getting started! OUR TEAM We are an enthusiastic, passionate and hardworking team of ≈ 100 people. Our founding team has strong entrepreneurial experience building and scaling web products from 0 to IPO. Alexis Soulopoulos [CEO] • 10+ years in Tech Executive Leadership • Co-Founder Mad Paws Holdings (from 0 to IPO) • Forbes 30 under 30 + Deloitte TechFast50 ’22 & ‘23 Michael Monin [Co-founder & CTO] • 10+ years as CTO / COO (web2/web3), 3 years in AI/LLM • Serial-entrepreneur: MTK Digital (exited / 0->$20m revenue) and Zipchat (AI Chatbot for E-commerce brands) Thomas Lacroix [Co-founder & CMO] • 8+ years in Customer Acquisition & E-commerce Growth • Serial-entrepreneur: Curatible (sold to Blackstone) and MTK Digital (exited / 0->$20m revenue) Maruša Fasano [CFO/Legal] • 25+ years in Finance, Strategy, M&A • Ex-CFO/M&A @Curatible (exited to Blackstone) • Ex-President of the Board @SotremoSA (exited) • Co-founder/CFO @SoftOne (exited) YOUR ROLE As a Security Engineer, you’ll own application security for a fast-growing AI companionship platform. This is a hands-on AppSec role: you’ll review code, find real vulnerabilities and drive fixes across the stack. You’ll be the main security person in the company, reporting directly to our CTO and Co-Founder. You’ll set direction yourself and explain risk clearly to non-security colleagues. Our product includes AI-generated content, including NSFW content, and you’ll also keep an eye on AI-specific threats like prompt injection. Real ownership from day one. This isn’t an infrastructure, networking or DevSecOps role: we’re looking for application security depth. KEY RESPONSIBILITIES APPLICATION SECURITY (THE CORE OF THE ROLE) - Review code every week to catch vulnerabilities before they ship - Find, prioritize and drive fixes for real vulnerabilities across the stack, not surface-level issues AUDITS AND PENTESTS - Coordinate external security audits and penetration tests - Challenge findings where needed, and follow them through to fixes ENGINEERING AND AUTOMATION - Automate security work and build the tools you need to scale it - Use AI tools daily in your security work: code review, pentests and scripting OWNERSHIP AND COMMUNICATION - Own security end to end with little support, and decide what matters most - Explain technical risk in plain words to the team and leadership - Cover security alerts, including occasional night and weekend on-call ALSO PART OF THE ROLE (LIGHTER) - Keep a simple risk register and GRC documentation up to date - Share security updates with the team and run awareness training - Watch emerging AI threats (prompt injection, jailbreaks, content filter bypass) and incidents at our AI providers YOUR QUALIFICATIONS MUST-HAVES - 2+ years of hands-on security experience - Hands-on AppSec, not compliance only: you review code regularly and can walk us through a real vulnerability you found and fixed - Audits and pentests: you’ve coordinated an external audit or pentest and followed the findings through to fixes - Engineering workflows: you ship code with Git/GitHub, script in Python or Bash, and have recent hands-on work on a modern web stack (e.g. Rails, Node; GCP, Heroku or similar) - Ownership with little support: you’ve been the sole or lead security person, or owned a security area on your own. You’ve reviewed code or tested systems every week in the last 2 years, and you explain risk clearly to non-technical people - AI in your daily work: you use AI tools every day in your security work - A hacker mindset: You love breaking things to make them safer, and security isn’t only your job: you do it for fun too, through bug bounties, CTFs, research, write-ups or your own tools. NICE-TO-HAVES - ⭐ AI/LLM security testing (prompt injection, jailbreaking): a strong plus - Experience at an AI company or a scale-up - GRC awareness - Familiarity with MDM and access management SOFT SKILLS 🗣 Strong communication & collaborative skills (perfectly fluent in English) 🧢 Goal-orientated, ownership and commitment ⚡️ Doer mindset - we are moving fast and we need people who can find the right balance between executing, planning and strategy 🧢 Humble - willing to learn, open to feedback 🍭 #NSFW - you are comfortable working in an environment with products that are based on uncensored models and content WHY EVERAI? 📈 Exponential Growth: From 50M users in 2 years, to 100M next — and 500M beyond 🚀 Track Record of Category-Creating Innovation: We consistently launch world-first AI applications — setting the pace, not following it 🌍 Global Impact: Top-tier user growth, real-world adoption, and cultural relevance 🧠 Proven Leadership: A senior team that’s launched, scaled, and exited & IPO’d multiple scale ups — now fully focused on reshaping AI companionship 👥 Elite Remote Team: 100% remote and built to win — world-class talent from Tier 1 tech companies, with a culture of ownership, velocity, and radical creativity 🛡️ Ethical Core: Our AI ecosystem is governed by EverGuard, our proprietary AI moderation technology, ensuring responsible development at scale WHAT WE OFFER ✍️ Contract Type: We prefer B2B, but we’re flexible, what matters is long-term commitment and impact 📍 Work From Anywhere: Fully remote. Choose the environment where you do your best work 🏝️ Paid Time Off: 4 weeks (20 working days) of PTO per year to recharge and reset 👨‍👩‍👧‍👦 Annual Gathering: A yearly in-person meetup to connect, brainstorm, and celebrate wins together ❤️‍🩹 Health & Wellness Support: Monthly allowance of 100 USD for health insurance expenses & access to unlimited 1:1 sessions with psychologists and lifestyle experts through OpenUp (also available to up to three of your family members) 🏢 Co-Working Space Budget: Work from a co-working space up to twice per month (35 EUR / 40 USD per visit) to stay inspired and connected 📚 Learning Budget: Dedicated funds to support your professional growth: courses, books, conferences, events, or certifications 💻 Company Laptop & Equipment: Laptop provided + monitor budget up to 250 USD + keyboard/mouse/mic/headphones budget up to 150 USD ⚡ AI Tools Access: Premium access to ChatGPT, Hugging Face, Claude Code, and any other tool needed to excel at your job, power your ideas and workflows 🎯 TOP TIER TALENT IS OUR MULTIPLIER We’re a fully remote group of A-players from Tier 1 tech, led by an exec team who’ve launched, scaled, and exited multiple companies. We move fast, and care deeply about what we build — and who we build it with. We’re looking for exceptional talent ready to ship & distribute world-first AI products at scale, fast, and co-create with us this category-defining business. If that’s you — reach out and apply!

Location: Горно-Алтайск **Релокация на Алтай обязательна!** **Курорт "Манжерок"** — крупнейший туристический проект России. Мы создаем инфраструктуру мирового уровня, и наши ИТ-сервисы развиваются столь же стремительно. Нам необходим опытный руководитель, "играющий тренер", службы кибербезопасности, способный оперативно решать технические задачи и обеспечивать защиту данных по самым высоким стандартам. Обязанности **Чем предстоит заниматься:** • организовывать работу отдела кибербезопасности, • оценивать риски кибербезопасности, • разрабатывать нормативные акты и стандарты кибербезопасности, • противодействовать внешним и внутренним угрозам, • анализировать защищенность информационных систем и процессов, • защищать персональные данные пользователей, • взаимодействовать с операторами обработки данных, • обучать сотрудников вопросам кибербезопасности, • выявлять и устранять уязвимости, • контролировать исполнение требований кибербезопасности. Требования **Ждём от кандидата**: • готовность переехать на Алтай минимум на два года, • наличие опыта работы руководителем отдела кибербезопасности в крупной организации от трех лет, • практическое владение вопросами сетевой безопасности и администрированием защитных средств, • опыт стратегического планирования в области кибербезопасности, • профильное высшее образование либо профессиональную подготовку в сфере информационной безопасности, • глубокое понимание механизмов работы средств защиты информации (DLP, SIEM, WAF), • компетентность в международных стандартах и фреймворках (CVE, CWE, CVSS, MITRE ATT&CK). Будет плюсом: • опыт работы с SGRC-системами, • практические навыки применения зарубежных стандартов информационной безопасности. Условия **Что мы предлагаем:** * работу в офисе на территории лучшего курорта страны, 5/2, 9-18 ч. * компенсация расходов на аренду жилья, * корпоративное питание, * ДМС со стоматологией с первого рабочего дня, действует в т.ч.в Москве, в Санкт-Петербурге,Новосибирске * подписку на сервис СберПрайм+ * занятия по сноуборду и горным лыжам

Location: Intellias Meet your recruiter Diana Meneses diana.meneses@intellias.com https://www.linkedin.com... Vacancy details Information Security Security Engineer Senior United States Remote APPLY NOW REFER A FRIEND Dive deep into Digital! For 20 years Intellias has been developing top-tier digital solutions for the world’s leading companies, keeping them in line with the latest technology trends. Join in and provide innovations for the future! What project we have for you The Application Security Engineer maintains independence from the development teams, reporting to our Cybersecurity Business Analyst, but would spend most of their time working with the Dev and DevOps teams. Their focus would be: Implementing and configuring SAST (static application security testing) and DAST (dynamic application security testing) across our web properties, including TOA, APIs, AFB, and the Project One stack. Integrating security checks into our CI/CD pipelines. Working with the teams to ensure secrets are handled securely and building rotation practices in line with our policies and standards. Helping teams understand, prioritize, and remediate the findings these tools produce. What you will do Select, deploy, and tune SAST tooling across our repositories, integrating scans into pull requests and CI/CD pipelines with practical quality gates. Implement and operate DAST scanning against our web applications and APIs in staging and production-like environments. Add software composition analysis and dependency scanning to track vulnerable open-source components. Reduce false positives and alert fatigue through rule tuning, baselining, and severity thresholds so developers trust the results and act on them. Recommend and implement secrets management solutions and practices that align with our existing policies and standards for storing, distributing, rotating, and auditing secrets. Deploy secret scanning in repositories, commit hooks, and pipelines to catch hardcoded credentials before they ship, and partner with DevOps to remove long-lived credentials from pipelines, configurations, and infrastructure-as-code. Lead the response when secrets are exposed: revoke, rotate, assess impact, and fix the root cause. Triage findings from scanners, penetration tests, external reports, and internal reviews, prioritizing by exploitability, exposure, and business impact rather than raw severity scores. Work directly with developers and DevOps engineers to understand root causes, propose practical fixes, and agree on realistic remediation timelines. Track findings to closure in the teams’ existing workflow tools, and define and enforce remediation SLAs by severity. Identify recurring vulnerability patterns and address them at the source through shared libraries, secure defaults, and pipeline guardrails. Perform manual code reviews and targeted security testing on high-risk features such as authentication, file uploads, and APIs. Provide clear, actionable remediation guidance with code-level examples, and contribute to secure coding standards aligned to OWASP Top 10 and ASVS. Participate in design and architecture discussions to provide security input and threat modeling for new features and services. Build the roadmap, processes, and tooling strategy for a new application security function, including build-versus-buy recommendations and vendor evaluations. Define and report application security metrics to security leadership, such as scan coverage, mean time to remediate, and open critical and high findings. Support audit and compliance requirements related to secure development, and contribute to incident response for application-layer security events. What you need for this Required Qualifications: BA/BS in Computer Science, Information Technology, Cybersecurity, or a related field, with 5+ years of experience in application security, product security, or a security-focused engineering role, or equivalent practical experience. Hands-on experience deploying and operating SAST and DAST tools in CI/CD pipelines, including tuning them for accuracy. Experience implementing secrets management and secret scanning in a production environment. Strong knowledge of web application vulnerabilities (OWASP Top 10, CWE Top 25) and how to remediate them in code. Working knowledge of authentication and identity management workflows and protocols (e.g., SAML, OAuth 2.0, OpenID Connect, SSO, session management) and the common security flaws in how they are implemented. Ability to read and review code in at least one modern language (e.g., Python, JavaScript/TypeScript, Java, C#, Go). Working knowledge of CI/CD platforms (e.g., GitHub Actions, GitLab CI, Jenkins) and DevOps practices. Demonstrated experience working with developers to fix security issues, not just report them. Preferred Qualifications: Experience building or significantly maturing an application security program from scratch. Experience with threat modeling methodologies such as STRIDE or PASTA. Experience with cloud and container security (e.g., Microsoft Azure, AWS, or GCP; Docker and Kubernetes). Experience with infrastructure-as-code security scanning and API security testing. Experience evaluating security tooling, including build-versus-buy decisions. Familiarity with security compliance frameworks such as SOC 2, and with supply chain security concepts such as SBOMs and SLSA. Relevant certifications such as GWAPT, OSWE, CSSLP, or equivalent. Skills & Competencies: Strong systems thinking, with the ability to embed security controls into engineering workflows without slowing teams down. Sound judgment to prioritize findings based on real risk and to explain trade-offs to both engineers and leadership. Excellent written and verbal communication, with the ability to produce clear, actionable remediation guidance and documentation. Collaborative, pragmatic approach to influencing teams without direct authority. Ability to move effectively between hands-on technical work and program-level planning. Ability to work independently and drive initiatives through ambiguity in a function that is new to the organization. What it’s like to work at Intellias At Intellias, where technology takes center stage, people always come before processes. By creating a comfortable atmosphere in our team, we empower individuals to unlock their true potential and achieve extraordinary results. That’s why we offer a range of benefits that support your well-being and charge your professional growth. We are committed to fostering equity, diversity, and inclusion as an equal opportunity employer. All applicants will be considered for employment without discrimination based on race, color, religion, age, gender, nationality, disability, sexual orientation, gender identity or expression, veteran status, or any other characteristic protected by applicable law. We welcome and celebrate the uniqueness of every individual. Join Intellias for a career where your perspectives and contributions are vital to our shared success.

🔹 анализ инфраструктуры на уязвимости: сеть, ОС, приложения (black/grey/white box); 🔹 пентесты и Red Team для проверки защиты и эффективности SOC;