All remote jobs

Security Engineer (Remote – Poland)

AI Summary
EverAI is seeking a hands-on Security Engineer to own application security for a rapidly growing AI companionship platform. The role centers on recurring code reviews, vulnerability discovery and remediation, coordination of external audits and penetration tests, and security automation. The engineer will operate with substantial independence, communicate risk to technical and non-technical stakeholders, and provide occasional out-of-hours alert coverage. The position also includes AI/LLM threat assessment, including prompt injection, jailbreaks, and content-filter bypass risks, plus lightweight GRC and security-awareness responsibilities.
Remote from
Poland
Salary
EUR 65k–85k / yr
Department
Cybersecurity
Employment
Full Time
Experience
Director
Published
Apply before
11 Dec 2026
Listing views
17
Application actions
1
Application toolkit

Make your next move.

Prepare your resume, explore your fit, and draft a cover letter for this opportunity.

Opportunity details

About this role.

Our Vision & Products

🚀 EverAI — Building the Future of AI Companionship

One of the Top 15 Largest & Fastest-Growing AI Companies in the World

50 Million Users in 2 years — Help Us Reach 100M first, 500M next

At EverAI, we’re shaping what it means to connect with AI. With 50 million users and counting, we’re not just building products — we’re creating entirely new categories.

Our flagship product is the world’s largest AI companionship platform, redefining relationships for millions. It is governed by our proprietary moderation system, EverGuard — an internal AI designed to ensure everything we build is safe, ethical, and human-first.

And we’re only just getting started!

Our Team

We are an enthusiastic, passionate and hardworking team of ≈ 100 people. Our founding team has strong entrepreneurial experience building and scaling web products from 0 to IPO.

Alexis Soulopoulos [CEO]

• 10+ years in Tech Executive Leadership

• Co-Founder Mad Paws Holdings (from 0 to IPO)

• Forbes 30 under 30 + Deloitte TechFast50 ’22 & ‘23

Michael Monin [Co-founder & CTO]

• 10+ years as CTO / COO (web2/web3), 3 years in AI/LLM

• Serial-entrepreneur: MTK Digital (exited / 0->$20m revenue) and Zipchat (AI Chatbot for E-commerce brands)

Thomas Lacroix [Co-founder & CMO]

• 8+ years in Customer Acquisition & E-commerce Growth

• Serial-entrepreneur: Curatible (sold to Blackstone) and MTK Digital (exited / 0->$20m revenue)

Maruša Fasano [CFO/Legal]

• 25+ years in Finance, Strategy, M&A

• Ex-CFO/M&A @Curatible (exited to Blackstone)

• Ex-President of the Board @SotremoSA (exited)

• Co-founder/CFO @SoftOne (exited)

Your Role

As a Security Engineer, you’ll own application security for a fast-growing AI companionship platform. This is a hands-on AppSec role: you’ll review code, find real vulnerabilities and drive fixes across the stack. You’ll be the main security person in the company, reporting directly to our CTO and Co-Founder. You’ll set direction yourself and explain risk clearly to non-security colleagues. Our product includes AI-generated content, including NSFW content, and you’ll also keep an eye on AI-specific threats like prompt injection. Real ownership from day one.

This isn’t an infrastructure, networking or DevSecOps role: we’re looking for application security depth.

Key Responsibilities

Application security (the core of the role)

  • Review code every week to catch vulnerabilities before they ship

  • Find, prioritize and drive fixes for real vulnerabilities across the stack, not surface-level issues

Audits and pentests

  • Coordinate external security audits and penetration tests

  • Challenge findings where needed, and follow them through to fixes

Engineering and automation

  • Automate security work and build the tools you need to scale it

  • Use AI tools daily in your security work: code review, pentests and scripting

Ownership and communication

  • Own security end to end with little support, and decide what matters most

  • Explain technical risk in plain words to the team and leadership

  • Cover security alerts, including occasional night and weekend on-call

Also part of the role (lighter)

  • Keep a simple risk register and GRC documentation up to date

  • Share security updates with the team and run awareness training

  • Watch emerging AI threats (prompt injection, jailbreaks, content filter bypass) and incidents at our AI providers

Your Qualifications

Must-haves

  • 2+ years of hands-on security experience

  • Hands-on AppSec, not compliance only: you review code regularly and can walk us through a real vulnerability you found and fixed

  • Audits and pentests: you’ve coordinated an external audit or pentest and followed the findings through to fixes

  • Engineering workflows: you ship code with Git/GitHub, script in Python or Bash, and have recent hands-on work on a modern web stack (e.g. Rails, Node; GCP, Heroku or similar)

  • Ownership with little support: you’ve been the sole or lead security person, or owned a security area on your own. You’ve reviewed code or tested systems every week in the last 2 years, and you explain risk clearly to non-technical people

  • AI in your daily work: you use AI tools every day in your security work

  • A hacker mindset: You love breaking things to make them safer, and security isn’t only your job: you do it for fun too, through bug bounties, CTFs, research, write-ups or your own tools.

Nice-to-haves

  • ⭐ AI/LLM security testing (prompt injection, jailbreaking): a strong plus

  • Experience at an AI company or a scale-up

  • GRC awareness

  • Familiarity with MDM and access management

Soft Skills

🗣 Strong communication & collaborative skills (perfectly fluent in English)

🧢 Goal-orientated, ownership and commitment

⚡️ Doer mindset – we are moving fast and we need people who can find the right balance between executing, planning and strategy

🧢 Humble – willing to learn, open to feedback

🍭 #NSFW – you are comfortable working in an environment with products that are based on uncensored models and content

Why EverAI?

📈 Exponential Growth: From 50M users in 2 years, to 100M next — and 500M beyond

🚀 Track Record of Category-Creating Innovation: We consistently launch world-first AI applications — setting the pace, not following it

🌍 Global Impact: Top-tier user growth, real-world adoption, and cultural relevance

🧠 Proven Leadership: A senior team that’s launched, scaled, and exited & IPO’d multiple scale ups — now fully focused on reshaping AI companionship

👥 Elite Remote Team: 100% remote and built to win — world-class talent from Tier 1 tech companies, with a culture of ownership, velocity, and radical creativity

🛡️ Ethical Core: Our AI ecosystem is governed by EverGuard, our proprietary AI moderation technology, ensuring responsible development at scale

What We Offer

✍️ Contract Type: We prefer B2B, but we’re flexible, what matters is long-term commitment and impact
📍 Work From Anywhere: Fully remote. Choose the environment where you do your best work
🏝️ Paid Time Off: 4 weeks (20 working days) of PTO per year to recharge and reset
👨‍👩‍👧‍👦 Annual Gathering: A yearly in-person meetup to connect, brainstorm, and celebrate wins together
❤️‍🩹 Health & Wellness Support: Monthly allowance of 100 USD for health insurance expenses & access to unlimited 1:1 sessions with psychologists and lifestyle experts through OpenUp (also available to up to three of your family members)
🏢 Co-Working Space Budget: Work from a co-working space up to twice per month (35 EUR / 40 USD per visit) to stay inspired and connected
📚 Learning Budget: Dedicated funds to support your professional growth: courses, books, conferences, events, or certifications
💻 Company Laptop & Equipment: Laptop provided + monitor budget up to 250 USD + keyboard/mouse/mic/headphones budget up to 150 USD
⚡ AI Tools Access: Premium access to ChatGPT, Hugging Face, Claude Code, and any other tool needed to excel at your job, power your ideas and workflows

🎯 Top Tier Talent Is Our Multiplier

We’re a fully remote group of A-players from Tier 1 tech, led by an exec team who’ve launched, scaled, and exited multiple companies. We move fast, and care deeply about what we build — and who we build it with.

We’re looking for exceptional talent ready to ship & distribute world-first AI products at scale, fast, and co-create with us this category-defining business.

If that’s you — reach out and apply!

Apply now >

This job listing has been manually reviewed by the Jobicy Trust & Safety Team for compliance with our posting guidelines, including verification of the company's legitimacy, accuracy of job details, clarity of remote work policy, and absence of misleading or fraudulent content.

Role DNA

A quick view of the complexity, pace, ownership and collaboration implied by the job description.

Job Complexity

4/5
EasyHard

Pace & Pressure

5/5
RelaxedFast-paced

Autonomy Level

5/5
GuidedFull ownership

Communication Load

4/5
IndependentCollaborative
AI insightThis is a broad, high-ownership AppSec role for the primary security practitioner in a fast-moving AI company. Success requires practical secure-code expertise, sound prioritization, automation ability, and confidence communicating business risk without extensive security-team support.

Salary analysis

Estimated compensation compared with the broader EU market for similar roles.

Estimated job median (per year)Market rate
€75,000
EU market range (per year)€60k–€95k
AI insightThe employer discloses a yearly base-pay range of EUR 65,000–85,000, with a midpoint of EUR 75,000. A reasonable estimated European market range for an application-security engineer with independent ownership responsibilities is EUR 60,000–95,000 per year; this is an AI estimate, not verified salary research.

Core skills

Skills and capabilities most closely associated with this opportunity.

Sample interview questions
Describe a vulnerability you identified through code review and how you drove it to remediation.

I would explain the attack path, affected assets, severity rationale, and the root cause in the code. I would then describe collaborating with engineers on a safe fix, adding regression tests or detection where appropriate, verifying the deployment, and documenting the lesson for future reviews.

How would you prioritize security work as the primary security engineer at a fast-growing company?

I would prioritize based on exploitability, potential user and business impact, exposure, and the strength of existing controls. I would maintain a lightweight risk register, address critical internet-facing and data-access risks first, and balance immediate remediation with scalable controls such as secure-review practices and automation.

How would you test an AI product for prompt injection and jailbreak vulnerabilities?

I would define the system boundaries, sensitive actions, trusted data sources, and expected refusal behavior. I would build repeatable adversarial test cases for direct and indirect prompt injection, tool misuse, data exfiltration, and content-filter bypass, then measure outcomes and work with engineering to add layered mitigations and regression tests.

What is your approach to managing findings from an external penetration test?

I would validate each finding against the real architecture and threat model, clarify evidence with the assessor when needed, and assign owners and due dates based on risk. I would track remediation through verification, challenge unsupported conclusions professionally, and turn recurring findings into preventive engineering controls.

How do you communicate a complex application-security risk to non-security stakeholders?

I avoid jargon and explain what could happen, who could be affected, how likely it is, and what decision is needed. I present practical options with trade-offs, such as immediate containment, a short-term fix, and a longer-term control, so leaders can make an informed risk decision.

This analysis is generated from the job description. Salary estimates, role characteristics and sample answers are guidance, not employer-provided facts.
Next step

Apply now.

Follow the employer’s application method and review Jobicy’s safety guidance before sharing personal information.

Did you apply?Let us know, and we’ll help you track your application.

Continue on the employer website

Protect your personal information and never pay to secure an interview or job offer. .

Log in to save
One quick step before you apply

Sign in to continue.

Sign in or create a free account to continue to the employer's application.

Add alert
Jobs Talent AI Tools Salaries
Menu