Security Engineer (Fully Remote)

Job summary

As a Security Engineer, you will be responsible for safeguarding the product, users, and collaborators of a rapidly growing AI companionship platform. This hands-on role involves working across application security, risk and compliance, and security awareness, with a focus on AI-specific threats as the product evolves.

Qualifications

• Proven experience in application security, including code reviews and vulnerability management.
• Experience in coordinating or conducting penetration tests and security audits.
• Proficient in shipping code and familiar with Git/GitHub workflows.
• Scripting and automation skills are essential.
• Familiarity with AI/LLM security concepts is a plus, with a strong curiosity for the field.
• Excellent communication and collaboration skills in English.
• Goal-oriented with a commitment to ownership and execution.
• Comfortable in an environment with uncensored models and content.

Responsibilities

• Conduct weekly code reviews to identify vulnerabilities prior to deployment.
• Manage and prioritize the remediation of security vulnerabilities across the technology stack.
• Coordinate external security audits and penetration tests, ensuring follow-up on findings.
• Maintain and update the risk register, mapping company services and prioritizing exposure.
• Support audit follow-ups and keep governance, risk, and compliance documentation current.
• Communicate emerging threats to the team and provide company-wide security updates.
• Execute phishing simulations and security training sessions.
• Monitor security channels and alerts, providing weekend coverage as needed.
• Set up and secure new employee devices and manage access provisioning.
• Monitor emerging attack techniques targeting generative AI and track security incidents from third-party AI providers.

Tools

• Familiarity with security monitoring tools and platforms is beneficial.