Evervault Logo

Evervault

Security Engineer

Posted 15 Days Ago
Be an Early Applicant
Hybrid
London, Greater London, England, GBR
Mid level
Hybrid
London, Greater London, England, GBR
Mid level
Own application security as Evervault’s first dedicated security engineer. Responsibilities include finding and fixing application and infrastructure vulnerabilities, building security tooling into software development, advising on secure product and system design, managing audits and compliance evidence, resolving findings, and handling customer security reviews. The role combines hands-on security engineering with security assurance work across a payment infrastructure platform.
The summary above was generated by AI

About Evervault

Evervault offers modular payments infrastructure for companies building their own payments stack. We keep raw card data off your systems, cut PCI compliance work, improve acceptance, mitigate fraud and chargebacks and decrease your cost of payments, so you keep full control. Trusted by Ramp, Rippling, Modern Treasury and Overwolf; Series B, led by Ribbit Capital.

Role Overview

We're hiring our first dedicated Security Engineer. You'll join our platform group and own application security from day one, with scope to take on security across Evervault over time. Expect roughly half your first year on hands-on security engineering and half on audits, questionnaires and customer security reviews. Both are core to the job.

What You'll Be Doing

  • Finding and fixing vulnerabilities in our applications and infrastructure

  • Building security checks and tooling into how we develop and ship software

  • Working with engineers on security decisions in product and system design

  • Owning security and compliance audits, including evidence collection and resolving findings

  • Handling customer security reviews and questionnaires, and explaining our controls clearly

  • Setting how the security function works, through the code you ship and the practices you help the team adopt

Requirements

  • Strong engineering skills: comfortable writing production code, investigating unfamiliar systems and taking a fix through to completion

  • Deep, practical security expertise across application and infrastructure security

  • Hands-on experience with PCI DSS

  • Experience taking audits through to resolution

  • You use AI daily and actively look for ways it can improve your work

Nice to Have

  • Experience in card payments, particularly running or securing a cardholder data environment

  • Experience as a first or sole security engineer

  • A product company background before Series C

  • Rust, Node.js, AWS or Terraform (we care more about engineering ability than our exact stack)

This Might Not Be for You If…

  • You want pure offensive or research work: around half the role is audits, questionnaires and customer reviews

  • You want to manage people soon: this is an individual contributor role with no immediate management remit

  • You need a tightly defined brief: you'll be shaping the security function as you go

  • You want to work fully remotely: we're in our Shoreditch office Tuesday to Thursday

Compensation, Benefits & Why Join

  • Competitive London Salary

  • Stock options with an extended exercise window

  • Full, top-tier health insurance

  • Generous vacation and flexible working hours

  • Define the security function at a fast-growing payments infrastructure company, working closely with the engineers who build it

Interview Process

  1. Recruiter screen

  2. Hiring manager interview

  3. Technical interview #1

  4. Technical interview #2

  5. Final Founder interview

  6. References and offer

Location

This role is based in London, in our Shoreditch office Tuesday to Thursday. We do not currently sponsor UK work visas.

Candidates must be based in the location specified. Any applications from candidates not in the required location may not receive a response.

Similar Jobs

8 Days Ago
In-Office
London, Greater London, England, GBR
Expert/Leader
Expert/Leader
Fintech • Payments • Financial Services
Own and transform application security across the software development lifecycle for a regulated payments fintech. Build secure-by-default patterns, pipeline-embedded controls, threat-modeling practices, security champion programs, and developer enablement. Partner closely with engineering, platform, product, compliance, and operations teams to improve security without creating delivery bottlenecks. Use automation, attacker-focused risk analysis, and practical cloud and application security expertise to scale security across the organization.
Top Skills: Cloud SecurityDastGoHsmPkiPolicy-As-CodeSastScaSecrets Scanning
10 Days Ago
Remote or Hybrid
United Kingdom
Mid level
Mid level
Enterprise Web • HR Tech • Information Technology • Software • Cybersecurity
Create and improve governance, risk, and compliance security labs, challenges, and learning content. Research regulations and standards, develop practical simulations, peer-review cyber ranges, simplify complex cybersecurity concepts, and advise engineering and product teams on security and privacy by design. The role requires GRC audit experience, knowledge of major compliance frameworks, strong cybersecurity fundamentals, and the ability to create engaging training for technical and non-technical users.
Top Skills: Iso 27001Iso 27002Mitre AtlasMitre D3FendNist Cybersecurity FrameworkNist Sp 800-53Soc 2
10 Days Ago
Hybrid
London, Greater London, England, GBR
Senior level
Senior level
Artificial Intelligence • Software
Own and advance security across AWS, cloud infrastructure, code, dependencies, secrets, containers, and corporate IT. The role involves maintaining security tooling, conducting security reviews, implementing code and infrastructure fixes, driving remediation, supporting ISO 27001 and SOC 2 compliance, advising on secure AI adoption, and leading security projects independently while influencing engineering teams.
Top Skills: Ai SecurityAWSContainerized WorkloadsCspmInfrastructure As CodeSastScaSecret Scanning

What you need to know about the London Tech Scene

London isn't just a hub for established businesses; it's also a nursery for innovation. Boasting one of the most recognized fintech ecosystems in Europe, attracting billions in investments each year, London's success has made it a go-to destination for startups looking to make their mark. Top U.K. companies like Hoptin, Moneybox and Marshmallow have already made the city their base — yet fintech is just the beginning. From healthtech to renewable energy to cybersecurity and beyond, the city's startups are breaking new ground across a range of industries.

Sign up now Access later

Create Free Account

Please log in or sign up to report this job.

Create Free Account