Security Engineer (Remote - Poland)

Role overview Own hands-on application security for a widely used AI companionship product, finding meaningful vulnerabilities in code and driving remediation across the application stack. As the primary security specialist, you will set priorities with limited day-to-day support, communicate risk to technical and nontechnical colleagues, and monitor threats specific to AI-generated content.

Responsibilities - Review application code regularly, identify and prioritize vulnerabilities, and work with engineering teams to get fixes shipped. - Coordinate external security audits and penetration tests, assess findings, and follow remediation to completion. - Automate security checks and develop scripts or tools to make security work scale. - Use AI tools in code review, testing, and scripting; monitor threats such as prompt injection, jailbreaks, and content-filter bypasses. - Own security priorities, explain risk clearly, and respond to alerts, including occasional night or weekend on-call. - Maintain risk and governance records, provide security updates and awareness training, and monitor relevant provider incidents.

Requirements - At least two years of practical security experience, with regular application security code review and a concrete example of a vulnerability found and fixed. - Experience coordinating an external audit or penetration test and driving findings to resolution. - Ability to work with Git-based engineering workflows, script in Python or Bash, and recent hands-on experience with a modern web stack and cloud environment. - Experience owning a security area independently or serving as a sole or lead security practitioner. - Recent, regular code review or system testing, plus ability to explain technical risks to nontechnical audiences. - Daily use of AI tools in security work and comfort working with products that may include uncensored or adult content.

Benefits and work setup - Fully remote, work-from-anywhere arrangement; B2B contracting is preferred, with flexibility for a long-term commitment. - Four weeks of paid time off, annual in-person gathering, health insurance allowance, wellbeing support, coworking and learning budgets, and laptop and equipment support.