← Back to jobs

Security Engineer (Full Remote - Spain)

everai

Remoto Spain
Information Security

Job Score

100 pts
Remote model (+90) Information Security (+10)

Our Vision & Products

🚀 EverAI — Building the Future of AI Companionship

One of the Top 15 Largest & Fastest-Growing AI Companies in the World

50 Million Users in 2 years — Help Us Reach 100M first, 500M next

At EverAI, we’re shaping what it means to connect with AI. With 50 million users and counting, we're not just building products — we're creating entirely new categories.

Our flagship product is the world’s largest AI companionship platform, redefining relationships for millions. It is governed by our proprietary moderation system, EverGuard — an internal AI designed to ensure everything we build is safe, ethical, and human-first.

And we’re only just getting started!

Our Team

We are an enthusiastic, passionate and hardworking team of ≈ 100 people. Our founding team has strong entrepreneurial experience building and scaling web products from 0 to IPO.

Alexis Soulopoulos [CEO]

• 10+ years in Tech Executive Leadership

• Co-Founder Mad Paws Holdings (from 0 to IPO)

• Forbes 30 under 30 + Deloitte TechFast50 ’22 & ‘23

Michael Monin [Co-founder & CTO]

• 10+ years as CTO / COO (web2/web3), 3 years in AI/LLM

• Serial-entrepreneur: MTK Digital (exited / 0->$20m revenue) and Zipchat (AI Chatbot for E-commerce brands)

Thomas Lacroix [Co-founder & CMO]

• 8+ years in Customer Acquisition & E-commerce Growth

• Serial-entrepreneur: Curatible (sold to Blackstone) and MTK Digital (exited / 0->$20m revenue)

Maruša Fasano [CFO/Legal]

• 25+ years in Finance, Strategy, M&A

• Ex-CFO/M&A @Curatible (exited to Blackstone)

• Ex-President of the Board @SotremoSA (exited)

• Co-founder/CFO @SoftOne (exited)

Your Role

As a Security Engineer, you will take ownership of protecting our product, our users, and our collaborators as we scale a fast-growing AI companionship platform. You'll work hands-on across application security, risk & compliance, and security awareness (plus keeping an eye on AI-specific threats as our product line evolves). Given the nature of our product (AI-generated content, including NSFW) you'll play a key role in keeping both our systems and our users safe, with real ownership from day one.

This is a hands-on role reporting directly to the Security Lead, with regular check-ins on priorities.

Key Responsibilities

Application Security

  • Perform weekly code reviews to catch vulnerabilities before they ship

  • Track, prioritize, and drive remediation of security vulnerabilities across the stack

  • Coordinate external security audits and penetration tests, and follow through on findings

Governance, Risk & Compliance (GRC)

  • Maintain and evolve our risk register, mapping all company services and prioritizing what's exposed

  • Support audit follow-up and keep GRC documentation up to date

Security Awareness

  • Communicate new threats to the team, document findings, and broadcast security updates company-wide

  • Run phishing simulations and security training (via Riot)

Monitoring & Coverage

  • Own the monitoring of security channels and alerts, including weekend coverage, so nothing goes unanswered

IT & Access Management

  • Set up and secure new employee devices (MDM), manage access provisioning/deprovisioning

AI Security Monitoring

  • Keep an eye on emerging attack techniques targeting generative AI (prompt injection, jailbreaks, content filter bypass)

  • Track security incidents and vulnerabilities disclosed by the third-party AI providers we rely on

Your Qualifications

Hard Skills

  • Solid experience in application security (code review, vulnerability management)

  • Experience coordinating or conducting penetration tests / security audits

  • Comfortable shipping code and working with Git/GitHub workflows

  • Scripting/automation skills

  • Bonus: familiarity with AI/LLM security concepts (prompt injection, jailbreaking, adversarial testing) — this is still an emerging field, so curiosity matters more than proven experience

Soft Skills

🗣 Strong communication & collaborative skills (perfectly fluent in English)

🧢 Goal-orientated, ownership and commitment

⚡️ Doer mindset - we are moving fast and we need people who can find the right balance between executing, planning and strategy

🧢 Humble - willing to learn, open to feedback

🍭 #NSFW - you are comfortable working in an environment with products that are based on uncensored models and content

Why EverAI?

📈 Exponential Growth: From 50M users in 2 years, to 100M next — and 500M beyond

🚀 Track Record of Category-Creating Innovation: We consistently launch world-first AI applications — setting the pace, not following it

🌍 Global Impact: Top-tier user growth, real-world adoption, and cultural relevance

🧠 Proven Leadership: A senior team that’s launched, scaled, and exited & IPO’d multiple scale ups — now fully focused on reshaping AI companionship

👥 Elite Remote Team: 100% remote and built to win — world-class talent from Tier 1 tech companies, with a culture of ownership, velocity, and radical creativity

🛡️ Ethical Core: Our AI ecosystem is governed by EverGuard, our proprietary AI moderation technology, ensuring responsible development at scale

What We Offer

✍️ Contract Type: We prefer B2B, but we’re flexible, what matters is long-term commitment and impact
📍 Work From Anywhere: Fully remote. Choose the environment where you do your best work
🏝️ Paid Time Off: 4 weeks (20 working days) of PTO per year to recharge and reset
👨‍👩‍👧‍👦 Annual Gathering: A yearly in-person meetup to connect, brainstorm, and celebrate wins together
❤️‍🩹 Health & Wellness Support: Monthly allowance of 100 USD for health insurance expenses & access to unlimited 1:1 sessions with psychologists and lifestyle experts through OpenUp (also available to up to three of your family members)
🏢 Co-Working Space Budget: Work from a co-working space up to twice per month (35 EUR / 40 USD per visit) to stay inspired and connected
📚 Learning Budget: Dedicated funds to support your professional growth: courses, books, conferences, events, or certifications
💻 Company Laptop & Equipment: Laptop provided + monitor budget up to 250 USD + keyboard/mouse/mic/headphones budget up to 150 USD
⚡ AI Tools Access: Premium access to ChatGPT, Cursor, Hugging Face, Claude Code, and any other tool needed to excel at your job, power your ideas and workflows

* 💸 Compensation: Our salary ranges are set based on role level, scope, location, and market data, and applied consistently regardless of candidate background or negotiation history. The final offer within the published range reflects assessed experience and scope.

🎯 Top Tier Talent Is Our Multiplier

We’re a fully remote group of A-players from Tier 1 tech, led by an exec team who’ve launched, scaled, and exited multiple companies. We move fast, and care deeply about what we build — and who we build it with.

We’re looking for exceptional talent ready to ship & distribute world-first AI products at scale, fast, and co-create with us this category-defining business.

If that’s you — reach out and apply!

💡 External Referral Program

Know someone who could be a great fit for this role? You can refer them through the EverAI External Referral Program and earn a bonus of up to 2,500 USD if they’re hired. Submit a referral here.

What did you think of this job?

Comments 0

Want to leave a comment?
Sign in or create your account in seconds to join the discussion.
Loading comments...

About Information Security

The Information Security area is one of the most strategic and in-demand fields in the technology market. With the rise of cyberattacks, data breaches, and regulations like LGPD and GDPR, companies of all sizes invest heavily in professionals who can protect their digital assets.

Key specializations include Network Security, Cloud Security (AWS, Azure, GCP), Offensive Security (Penetration Testing, Red Team), Defensive Security (SOC, Blue Team), AppSec, and Security Governance. Tools like SIEM (Splunk, QRadar), firewalls, EDR, and Vulnerability Management platforms are essential.

Certifications like CISSP, CEH, OSCP, CompTIA Security+, and AWS Security Specialty are important differentiators. Information security professionals are among the highest-paid in the sector, with growing demand especially in fintechs, healthtechs, and large enterprises.

Discover Other Areas

Understand the scope of work, key skills, and tools used in different career areas.

About Engineering

Software Engineering goes beyond traditional development, focusing on scalability, performance, and system architecture. Software engineers are responsible for designing infrastructures that support millions of simultaneous users.

Skills include microservices architecture, DevOps, cloud computing, application security, and performance optimization. Knowledge of containerization (Docker, Kubernetes) and CI/CD is increasingly required.

Senior software engineers are rare and highly compensated professionals, with opportunities at major global tech companies.

About Automation Engineer

The Automation Engineer is the professional responsible for designing, developing, and implementing solutions that automate manual and repetitive processes in IT, infrastructure, testing, and operations. They combine programming knowledge with DevOps and SRE vision to eliminate manual tasks and increase operational efficiency.

Key skills include Infrastructure as Code (Terraform, Ansible, Pulumi), CI/CD (Jenkins, GitHub Actions, GitLab CI), test automation (Selenium, Cypress, Playwright), network automation (Netconf, SDN), RPA (UiPath, Power Automate), and scripting (Python, Bash, PowerShell). Knowledge of Kubernetes, GitOps (ArgoCD, Flux), and automation platforms is a differentiator.

Automation Engineers in technology companies are highly valued, especially those who can create automated deployment pipelines, self-healing infrastructure, and internal developer platforms (IDP). The field offers opportunities from junior automation engineer to automation architect and head of automation.

About Blockchain

The Blockchain area involves the development and implementation of secure and distributed transaction ledgers. Professionals in this field work with smart contract development, cryptography, consensus algorithms, and platforms such as Ethereum, Hyperledger, and Solana, ensuring security and decentralization for various types of applications.

About Branding

Branding is the area responsible for building, managing, and strengthening a brand's identity and market value. Branding professionals create strategies that define how the brand is perceived by the public, from the logo to the complete customer experience.

Key skills include brand strategy, visual identity, brand guidelines, positioning, naming, brand voice, market research, brand equity, and brand management. Knowledge of graphic design (Figma, Illustrator, Photoshop), storytelling, and brand experience is a differentiator.

Branding professionals in technology companies are highly valued, especially those who master employer branding, digital branding, and can build strong, memorable brands in competitive markets. The field offers opportunities from brand designer to head of brand, with a focus on identity, differentiation, and perceived value.

About Cloud Solutions

The Cloud Solutions area is responsible for designing, implementing, and managing cloud infrastructure and services (AWS, Azure, GCP) for companies. Cloud professionals architect scalable, secure, and cost-optimized solutions, from data center migrations to serverless and multi-cloud architectures.

Key skills include IaC (Terraform, CloudFormation), containers (Docker, Kubernetes), serverless (Lambda, Cloud Functions), managed databases (RDS, DynamoDB, BigQuery), cloud networking (VPC, CDN, load balancer), and security (IAM, WAF, KMS). Knowledge of FinOps, cloud governance, and AWS/Azure/GCP certifications is a differentiator.

Cloud Solutions professionals in technology companies are highly valued, especially those who master multi-cloud architectures, FinOps, and can optimize costs while maintaining performance and security. The field offers opportunities from cloud engineer to cloud solutions architect, head of cloud, and chief cloud architect.

Career Guides

Technology Career Guide

Planning, skills, interviews, and professional growth in IT, Data Science, DevOps, and Product.

Read full guide →

Design Career Guide

UX/UI, Graphic Design, Product Design. Portfolio, tools, interviews, and growth in the Design field.

Read full guide →

Marketing Career Guide

SEO, Paid Media, Growth, Content Marketing. Certifications, tools, and strategies to grow in Digital Marketing.

Read full guide →

Finance Career Guide

Financial market, investments, corporate finance, certifications, and strategies to grow in the financial field.

Read full guide →

Communication Career Guide

Journalism, PR, Corporate Communication, Content Marketing, and Multimedia Production.

Read full guide →

Administration Career Guide

Business Management, HR, Logistics, Consulting, Project Management, and Entrepreneurship.

Read full guide →

Data Career Guide

Data Science, Data Engineering, BI, Machine Learning, and AI. From training to the job market.

Read full guide →

Product Career Guide

Product Management, Product Ownership, Agile, Scrum, and OKRs. From strategy to execution.

Read full guide →

Tech & Remote Glossary

Stop getting lost in interviews and job descriptions

The job market, especially within tech and global companies, has developed its own dialect. Not understanding these acronyms can make you lose valuable opportunities or poorly negotiate your contract. To end this problem, we created the Definitive Glossary for the Remote Professional.

🏢 Work Models & Routine

Async (Asynchronous Work)
A communication model where responses don't need to be immediate. Instead of back-to-back meetings, the team relies on well-structured documents, threads, and messages. It's the gold standard for global companies spanning multiple time zones.
Sync (Synchronous Work)
The opposite of Async. It requires the team to be online and available at the same time for meetings, live chats, and real-time collaboration.
Daily / Stand-up
A quick daily meeting (usually 15 minutes) common in Agile (Scrum) methodologies. The team answers three questions: What did I do yesterday? What will I do today? Are there any blockers?
All-Hands / Town Hall
A company-wide meeting involving all employees. Usually led by the founders (C-Levels) to present results, new goals, and answer team questions.
1:1 (One-on-One)
A recurring individual meeting between a professional and their direct manager. It is used for career alignment, feedback, and problem-solving, not just for project status updates.

💰 Contracts, Benefits & Compensation

PTO (Paid Time Off)
Instead of strict, categorized leave policies, modern US companies usually offer a flexible pool of days (e.g., 20 days of PTO, or even "Unlimited PTO") that you can use for vacations, sick days, or personal matters, while receiving your regular compensation.
Equity / Stock Options
Company ownership. The startup offers you the right to buy shares at a heavily discounted strike price in the future. If the company grows, goes public, or is acquired, these shares can be highly lucrative.
Vesting (Vesting Schedule)
The rule that controls your Equity. It usually lasts 4 years. You don't get all the shares on day one; you "earn" them gradually as you stay with the company. A "1-year Cliff" means you must stay for at least one year to receive your first batch of shares.
RSUs (Restricted Stock Units)
Unlike Stock Options (where you have the right to buy the stock), RSUs are actual shares the company grants you as a bonus or part of your compensation package, following a strict Vesting schedule.
Independent Contractor (1099 / B2B)
The most common international hiring model for global talent working for US companies. You act as a service provider (business-to-business), receiving the gross salary (often six-figure compensation) without standard local payroll tax deductions at the source.

🤖 Recruitment & Hiring Process

ATS (Applicant Tracking System)
The "robot" that reads your resume. Software like Greenhouse, Ashby, and Workday are used to filter candidates by keywords before a human even looks at the document. (Pro tip: this is why your resume must be clean, semantic, and have the right keywords).
JD (Job Description)
The document that lists the responsibilities, technical requirements, and benefits of the open position.
Cultural Fit
The interview stage that evaluates if your core values, communication style, and worldview align with the company's culture. This is the ultimate test of your Soft Skills.
Onboarding
The integration process. It's the period of your first few weeks at the company, where you get your access credentials, learn about the culture, study the internal documentation, and understand how the product works.

🚀 How to use this to your advantage?

The secret isn't just knowing what these acronyms mean, but using them actively. If during an interview for a premium tech role you ask, "How does your PTO policy and Vesting schedule work?", the recruiter will immediately perceive you as a high-level professional, familiar with the global market standards.

The remote job market requires preparation. And having the right vocabulary is the first big step to securing six-figure proposals and standing out among thousands of applicants.

Expert Tip

The Current State of the Cloud & DevOps Market

By Mondywork | The ultimate guide for tech professionals looking to level up their careers, land global remote roles, and master modern infrastructure.

The End of the "SysAdmin" and the Rise of Platform Engineering

If you've been tracking the most sought-after roles at startups and Fortune 500 companies, you've probably noticed a drastic shift. The Cloud Computing and DevOps market is no longer just about "keeping the app online." Today, companies demand extreme resilience, automation, and cost optimization (the famous FinOps).

DevOps culture has evolved. We are now in the era of Platform Engineering, where infrastructure teams build internal platforms to grant developers full autonomy (Self-Service). For those aiming for global remote roles with six-figure compensation, understanding this transition isn't just a plus—it's a strict requirement.

"Elite DevOps teams deploy code 973 times more frequently and boast a Mean Time To Recovery (MTTR) that is 6,570 times faster than low-performing teams."

— State of DevOps Report (DORA / Google Cloud)

What Do Recruiters and ATS Systems Really Look For?

Automated filters (ATS platforms like Greenhouse, Ashby, and Workday) are hardwired to scan for a very specific set of skills in Cloud/DevOps resumes. Simply listing 20 tools won't cut it anymore; you must demonstrate culture and real-world impact.

  • Infrastructure as Code (IaC): Forget clicking around the AWS console. Declarative tools like Terraform, Pulumi, and Ansible are the true industry standards.
  • Container Orchestration: Mastery of Docker and, above all, Kubernetes (K8s) is practically mandatory for premium roles.
  • CI/CD Culture: Building automated pipelines (GitHub Actions, GitLab CI, ArgoCD) that guarantee continuous and secure deployments.
  • Cloud Providers and Architecture: Proficiency in at least one major public cloud provider (AWS, Google Cloud, or Microsoft Azure), with a strong focus on Serverless, microservices, and system resilience.

How to Transition: The Roadmap to Success

Many Back-End developers, support analysts, and network professionals want to pivot to Cloud and DevOps. If that's your goal, follow this market-validated roadmap:

  1. Master the Basics (Linux and Networking): Modern DevOps runs on Linux. Understanding permissions, processes, bash scripting, and the fundamentals of TCP/IP, DNS, and Load Balancers is your foundation.
  2. Learn to Code: A DevOps engineer doesn't need to be a Senior Developer, but you must know how to automate tasks. Python and Go (Golang) are currently the most highly valued languages in this ecosystem.
  3. Are Certifications Worth It? Yes, especially to get past the initial HR screening. Certifications like the AWS Certified Solutions Architect – Associate or the CKA (Certified Kubernetes Administrator) carry massive weight in the global market.
  4. Build a Real Portfolio: Publish a project on GitHub where you provision infrastructure via Terraform, set up a CI/CD pipeline using GitHub Actions, and deploy a simple app to a Kubernetes cluster. Practical projects always beat theoretical resumes.

Essential References and Study Links

To stay up-to-date, we highly recommend following official organizations and annual market reports:


🚀 Want access to the best remote Cloud & DevOps jobs?

Join our mailing list and get the best jobs delivered straight to you, tailored to your areas of interest. Currently, we partner with over 200 companies that advertise their premium, remote-first roles with us. Sign up now and get the best opportunities in the global market right in your inbox!