Security Engineer – Full Remote

About the role

EverAI is looking for a Security Engineer to protect its fast‑growing AI companionship platform. You will own the security of the product, its users, and internal collaborators, working hands‑on across application security, risk & compliance, and security awareness.

Key responsibilities

• Perform weekly code reviews to identify and remediate vulnerabilities before release.
• Track, prioritize, and drive remediation of security issues across the entire stack.
• Coordinate external security audits and penetration tests, and follow up on findings.
• Maintain and evolve the company risk register, mapping services and prioritising exposed assets.
• Support audit follow‑up and keep GRC documentation up to date.
• Communicate new threats, document findings, and broadcast security updates company‑wide.
• Run phishing simulations and security training (via Riot) for all employees.
• Own monitoring of security alerts and provide weekend coverage.
• Set up and manage IT access controls and identity management processes.

Required profile

• Hands‑on security professional with a strong sense of ownership.
• Experience in application security, vulnerability management, and penetration testing.
• Familiarity with governance, risk & compliance (GRC) processes.
• Ability to communicate security concepts clearly across the organisation.

Required skills

• Code review for security vulnerabilities
• Penetration testing
• Risk management and risk register maintenance
• Security monitoring and alert handling
• IT access management

What we offer

• Fully remote work from Slovakia
• Opportunity to shape security for a product used by tens of millions
• Collaborative, fast‑growing AI‑focused team