Security Engineer
Evervault
About Evervault
Evervault offers modular payments infrastructure for companies building their own payments stack. We keep raw card data off your systems, cut PCI compliance work, improve acceptance, mitigate fraud and chargebacks and decrease your cost of payments, so you keep full control. Trusted by Ramp, Rippling, Modern Treasury and Overwolf; Series B, led by Ribbit Capital. Role Overview We're hiring our first dedicated Security Engineer. You'll join our platform group and own application security from day one, with scope to take on security across Evervault over time. Expect roughly half your first year on hands-on security engineering and half on audits, questionnaires and customer security reviews. Both are core to the job. What You'll Be Doing Finding and fixing vulnerabilities in our applications and infrastructure
Building security checks and tooling into how we develop and ship software
Working with engineers on security decisions in product and system design
Owning security and compliance audits, including evidence collection and resolving findings
Handling customer security reviews and questionnaires, and explaining our controls clearly
Setting how the security function works, through the code you ship and the practices you help the team adopt
Requirements Strong engineering skills: comfortable writing production code, investigating unfamiliar systems and taking a fix through to completion
Deep, practical security expertise across application and infrastructure security
Hands-on experience with PCI DSS
Experience taking audits through to resolution
You use AI daily and actively look for ways it can improve your work
Nice to Have Experience in card payments, particularly running or securing a cardholder data environment
Experience as a first or sole security engineer
A product company background before Series C
Rust, Node.js, AWS or Terraform (we care more about engineering ability than our exact stack)
This Might Not Be for You If… You want pure offensive or research work: around half the role is audits, questionnaires and customer reviews
You want to manage people soon: this is an individual contributor role with no immediate management remit
You need a tightly defined brief: you'll be shaping the security function as you go
You want to work fully remotely: we're in our Shoreditch office Tuesday to Thursday
Compensation, Benefits & Why Join Competitive London Salary
Stock options with an extended exercise window
Full, top-tier health insurance
Daily lunch budget
Unlimited PTO
Cyclescheme
Define the security function at a fast-growing payments infrastructure company, working closely with the engineers who build it
Interview Process Recruiter screen
Hiring manager interview
Technical interview #1
Technical interview #2
Final Founder interview
References and offer
Location This role is based in London, in our Shoreditch office Tuesday to Thursday. We do not currently sponsor UK work visas. Candidates must be based in the location specified. Any applications from candidates not in the required location may not receive a response.
Evervault offers modular payments infrastructure for companies building their own payments stack. We keep raw card data off your systems, cut PCI compliance work, improve acceptance, mitigate fraud and chargebacks and decrease your cost of payments, so you keep full control. Trusted by Ramp, Rippling, Modern Treasury and Overwolf; Series B, led by Ribbit Capital. Role Overview We're hiring our first dedicated Security Engineer. You'll join our platform group and own application security from day one, with scope to take on security across Evervault over time. Expect roughly half your first year on hands-on security engineering and half on audits, questionnaires and customer security reviews. Both are core to the job. What You'll Be Doing Finding and fixing vulnerabilities in our applications and infrastructure
Building security checks and tooling into how we develop and ship software
Working with engineers on security decisions in product and system design
Owning security and compliance audits, including evidence collection and resolving findings
Handling customer security reviews and questionnaires, and explaining our controls clearly
Setting how the security function works, through the code you ship and the practices you help the team adopt
Requirements Strong engineering skills: comfortable writing production code, investigating unfamiliar systems and taking a fix through to completion
Deep, practical security expertise across application and infrastructure security
Hands-on experience with PCI DSS
Experience taking audits through to resolution
You use AI daily and actively look for ways it can improve your work
Nice to Have Experience in card payments, particularly running or securing a cardholder data environment
Experience as a first or sole security engineer
A product company background before Series C
Rust, Node.js, AWS or Terraform (we care more about engineering ability than our exact stack)
This Might Not Be for You If… You want pure offensive or research work: around half the role is audits, questionnaires and customer reviews
You want to manage people soon: this is an individual contributor role with no immediate management remit
You need a tightly defined brief: you'll be shaping the security function as you go
You want to work fully remotely: we're in our Shoreditch office Tuesday to Thursday
Compensation, Benefits & Why Join Competitive London Salary
Stock options with an extended exercise window
Full, top-tier health insurance
Daily lunch budget
Unlimited PTO
Cyclescheme
Define the security function at a fast-growing payments infrastructure company, working closely with the engineers who build it
Interview Process Recruiter screen
Hiring manager interview
Technical interview #1
Technical interview #2
Final Founder interview
References and offer
Location This role is based in London, in our Shoreditch office Tuesday to Thursday. We do not currently sponsor UK work visas. Candidates must be based in the location specified. Any applications from candidates not in the required location may not receive a response.
Reference: WJCPA-4214_4610418 · Posted 13 Nov 2026, 01:25 AM