All remote jobs

Security Engineer (Remote – Netherlands)

AI Summary
EverAI is seeking a hands-on Application Security Engineer to own application security for a rapidly scaling AI companionship platform. The role focuses on recurring code reviews, vulnerability discovery and remediation, external audit and penetration-test coordination, and security automation. This person will operate as the primary security owner, reporting to the CTO and translating technical risk for non-security stakeholders. The position also addresses AI-specific risks such as prompt injection, jailbreaks, and content-filter bypasses, with occasional security-alert on-call coverage.
Remote from
Netherlands
Salary
EUR 65k–85k / yr
Department
Cybersecurity
Employment
Full Time
Experience
Director
Published
Apply before
11 Dec 2026
Listing views
19
Application actions
2
Application toolkit

Make your next move.

Prepare your resume, explore your fit, and draft a cover letter for this opportunity.

Opportunity details

About this role.

Our Vision & Products

🚀 EverAI — Building the Future of AI Companionship

One of the Top 15 Largest & Fastest-Growing AI Companies in the World

50 Million Users in 2 years — Help Us Reach 100M first, 500M next

At EverAI, we’re shaping what it means to connect with AI. With 50 million users and counting, we’re not just building products — we’re creating entirely new categories.

Our flagship product is the world’s largest AI companionship platform, redefining relationships for millions. It is governed by our proprietary moderation system, EverGuard — an internal AI designed to ensure everything we build is safe, ethical, and human-first.

And we’re only just getting started!

Our Team

We are an enthusiastic, passionate and hardworking team of ≈ 100 people. Our founding team has strong entrepreneurial experience building and scaling web products from 0 to IPO.

Alexis Soulopoulos [CEO]

• 10+ years in Tech Executive Leadership

• Co-Founder Mad Paws Holdings (from 0 to IPO)

• Forbes 30 under 30 + Deloitte TechFast50 ’22 & ‘23

Michael Monin [Co-founder & CTO]

• 10+ years as CTO / COO (web2/web3), 3 years in AI/LLM

• Serial-entrepreneur: MTK Digital (exited / 0->$20m revenue) and Zipchat (AI Chatbot for E-commerce brands)

Thomas Lacroix [Co-founder & CMO]

• 8+ years in Customer Acquisition & E-commerce Growth

• Serial-entrepreneur: Curatible (sold to Blackstone) and MTK Digital (exited / 0->$20m revenue)

Maruša Fasano [CFO/Legal]

• 25+ years in Finance, Strategy, M&A

• Ex-CFO/M&A @Curatible (exited to Blackstone)

• Ex-President of the Board @SotremoSA (exited)

• Co-founder/CFO @SoftOne (exited)

Your Role

As a Security Engineer, you’ll own application security for a fast-growing AI companionship platform. This is a hands-on AppSec role: you’ll review code, find real vulnerabilities and drive fixes across the stack. You’ll be the main security person in the company, reporting directly to our CTO and Co-Founder. You’ll set direction yourself and explain risk clearly to non-security colleagues. Our product includes AI-generated content, including NSFW content, and you’ll also keep an eye on AI-specific threats like prompt injection. Real ownership from day one.

This isn’t an infrastructure, networking or DevSecOps role: we’re looking for application security depth.

Key Responsibilities

Application security (the core of the role)

  • Review code every week to catch vulnerabilities before they ship

  • Find, prioritize and drive fixes for real vulnerabilities across the stack, not surface-level issues

Audits and pentests

  • Coordinate external security audits and penetration tests

  • Challenge findings where needed, and follow them through to fixes

Engineering and automation

  • Automate security work and build the tools you need to scale it

  • Use AI tools daily in your security work: code review, pentests and scripting

Ownership and communication

  • Own security end to end with little support, and decide what matters most

  • Explain technical risk in plain words to the team and leadership

  • Cover security alerts, including occasional night and weekend on-call

Also part of the role (lighter)

  • Keep a simple risk register and GRC documentation up to date

  • Share security updates with the team and run awareness training

  • Watch emerging AI threats (prompt injection, jailbreaks, content filter bypass) and incidents at our AI providers

Your Qualifications

Must-haves

  • 2+ years of hands-on security experience

  • Hands-on AppSec, not compliance only: you review code regularly and can walk us through a real vulnerability you found and fixed

  • Audits and pentests: you’ve coordinated an external audit or pentest and followed the findings through to fixes

  • Engineering workflows: you ship code with Git/GitHub, script in Python or Bash, and have recent hands-on work on a modern web stack (e.g. Rails, Node; GCP, Heroku or similar)

  • Ownership with little support: you’ve been the sole or lead security person, or owned a security area on your own. You’ve reviewed code or tested systems every week in the last 2 years, and you explain risk clearly to non-technical people

  • AI in your daily work: you use AI tools every day in your security work

  • A hacker mindset: You love breaking things to make them safer, and security isn’t only your job: you do it for fun too, through bug bounties, CTFs, research, write-ups or your own tools.

Nice-to-haves

  • ⭐ AI/LLM security testing (prompt injection, jailbreaking): a strong plus

  • Experience at an AI company or a scale-up

  • GRC awareness

  • Familiarity with MDM and access management

Soft Skills

🗣 Strong communication & collaborative skills (perfectly fluent in English)

🧢 Goal-orientated, ownership and commitment

⚡️ Doer mindset – we are moving fast and we need people who can find the right balance between executing, planning and strategy

🧢 Humble – willing to learn, open to feedback

🍭 #NSFW – you are comfortable working in an environment with products that are based on uncensored models and content

Why EverAI?

📈 Exponential Growth: From 50M users in 2 years, to 100M next — and 500M beyond

🚀 Track Record of Category-Creating Innovation: We consistently launch world-first AI applications — setting the pace, not following it

🌍 Global Impact: Top-tier user growth, real-world adoption, and cultural relevance

🧠 Proven Leadership: A senior team that’s launched, scaled, and exited & IPO’d multiple scale ups — now fully focused on reshaping AI companionship

👥 Elite Remote Team: 100% remote and built to win — world-class talent from Tier 1 tech companies, with a culture of ownership, velocity, and radical creativity

🛡️ Ethical Core: Our AI ecosystem is governed by EverGuard, our proprietary AI moderation technology, ensuring responsible development at scale

What We Offer

✍️ Contract Type: We prefer B2B, but we’re flexible, what matters is long-term commitment and impact
📍 Work From Anywhere: Fully remote. Choose the environment where you do your best work
🏝️ Paid Time Off: 4 weeks (20 working days) of PTO per year to recharge and reset
👨‍👩‍👧‍👦 Annual Gathering: A yearly in-person meetup to connect, brainstorm, and celebrate wins together
❤️‍🩹 Health & Wellness Support: Monthly allowance of 100 USD for health insurance expenses & access to unlimited 1:1 sessions with psychologists and lifestyle experts through OpenUp (also available to up to three of your family members)
🏢 Co-Working Space Budget: Work from a co-working space up to twice per month (35 EUR / 40 USD per visit) to stay inspired and connected
📚 Learning Budget: Dedicated funds to support your professional growth: courses, books, conferences, events, or certifications
💻 Company Laptop & Equipment: Laptop provided + monitor budget up to 250 USD + keyboard/mouse/mic/headphones budget up to 150 USD
⚡ AI Tools Access: Premium access to ChatGPT, Hugging Face, Claude Code, and any other tool needed to excel at your job, power your ideas and workflows

🎯 Top Tier Talent Is Our Multiplier

We’re a fully remote group of A-players from Tier 1 tech, led by an exec team who’ve launched, scaled, and exited multiple companies. We move fast, and care deeply about what we build — and who we build it with.

We’re looking for exceptional talent ready to ship & distribute world-first AI products at scale, fast, and co-create with us this category-defining business.

If that’s you — reach out and apply!

Apply now >

This job listing has been manually reviewed by the Jobicy Trust & Safety Team for compliance with our posting guidelines, including verification of the company's legitimacy, accuracy of job details, clarity of remote work policy, and absence of misleading or fraudulent content.

Role DNA

A quick view of the complexity, pace, ownership and collaboration implied by the job description.

Job Complexity

4/5
EasyHard

Pace & Pressure

5/5
RelaxedFast-paced

Autonomy Level

5/5
GuidedFull ownership

Communication Load

4/5
IndependentCollaborative
AI insightThis is a high-ownership AppSec position in which one engineer is expected to set security priorities, review code, automate workflows, and drive remediation across a fast-moving product. AI-specific threat modeling and direct communication with leadership add meaningful complexity.

Salary analysis

Estimated compensation compared with the broader EU market for similar roles.

Estimated job median (per year)Market rate
€75,000
EU market range (per year)€70k–€100k
AI insightThe employer discloses a yearly base compensation range of €65,000–€85,000, with a midpoint of €75,000. This is a plausible range for a mid-level to senior hands-on Application Security Engineer working remotely from the Netherlands, although the scope as the primary security owner may support compensation toward or above the top of the stated band.

Core skills

Skills and capabilities most closely associated with this opportunity.

Sample interview questions
Describe a significant vulnerability you found during a code review and how you drove it to resolution.

I would explain the vulnerability, its attack path and business impact, then show how I validated it, prioritized remediation, partnered with developers on a practical fix, and verified the fix with regression testing. I would also describe the preventive control added afterward, such as a secure coding pattern, automated test, or scanning rule.

How would you establish an application security program as the primary security engineer at EverAI?

I would begin with an asset and data-flow inventory, identify the highest-risk user-facing and AI-integrated components, and define a lightweight threat-modeling process. I would then establish a recurring code-review cadence, remediation SLAs, vulnerability tracking, security testing in CI where useful, and concise risk reporting for leadership.

How do you assess and mitigate prompt injection risk in an AI-enabled product?

I would map the model inputs, tools, system prompts, data sources, and actions that an attacker could influence. Controls would include strict authorization outside the model, input and output validation, tool allowlists, least-privilege service permissions, isolation of untrusted content, adversarial testing, logging, and monitoring for policy-bypass attempts.

What is your approach to working with findings from an external penetration test?

I first reproduce and validate each finding, assess exploitability and business context, and challenge unsupported severity ratings with clear evidence. For confirmed issues, I assign owners and timelines, support engineers with remediation guidance, track progress to closure, and retest or obtain evidence before marking findings resolved.

How would you explain a critical application-security risk to non-technical leaders?

I would avoid jargon and describe what could happen, who could be affected, the likelihood, and the business consequence. I would present a short set of remediation options with cost, urgency, residual risk, and a clear recommendation so leadership can make an informed decision quickly.

This analysis is generated from the job description. Salary estimates, role characteristics and sample answers are guidance, not employer-provided facts.
Next step

Apply now.

Follow the employer’s application method and review Jobicy’s safety guidance before sharing personal information.

Did you apply?Let us know, and we’ll help you track your application.

Continue on the employer website

Protect your personal information and never pay to secure an interview or job offer. .

Log in to save
One quick step before you apply

Sign in to continue.

Sign in or create a free account to continue to the employer's application.

Add alert
Jobs Talent AI Tools Salaries
Menu