Security Engineer

Job description

Evervault is hiring its first Security Engineer in London. We build modular card payment infrastructure for companies building payment products or their own payments stack. Our tools help developers keep raw card data off their systems, reduce PCI compliance work, and improve payment acceptance, fees and fraud outcomes. Our customers include Rippling, Ramp and Sorare. We’re a Series B company backed by Index Ventures, Sequoia Capital, and Kleiner Perkins. You’ll join our platform group and own application security from day one, with scope to take responsibility for security across Evervault over time. You’ll be our first dedicated security engineer, working closely with the engineers who build and run our products. In your first year, expect roughly half your time to go towards hands-on security engineering and half towards audits, questionnaires and customer security reviews. Both are core to the job. You’ll help make our systems more secure and give customers confidence in how we protect their data. Your work will include: Finding and fixing vulnerabilities in our applications and infrastructure. Building security checks and tooling into how we develop and ship software. Working with engineers on security decisions in product and system design. Owning security and compliance audits, including evidence collection and resolving findings. Handling customer security reviews and questionnaires, and explaining our controls clearly. You’ll establish how the security function works through the code you ship, the risks you address and the practices you help the team adopt. We work mostly in Rust and Node.js on AWS, with Terraform and some Go. We care more about your engineering ability than experience with every part of our stack. We’re looking for an excellent engineer with deep, practical security expertise. You should be comfortable writing production code, investigating unfamiliar systems and taking a fix through to completion. Strong engineering skills and hands-on experience with the Payment Card Industry Data Security Standard (PCI DSS) are both essential. Experience in card payments, particularly running or securing a cardholder data environment, is a strong signal. You’ve taken audits through to resolution and worked at a product company before Series C. Experience as a first or sole security engineer would be valuable. You use AI daily and actively look…