About Evervault
Evervault offers modular payments infrastructure for companies building their own payments stack. We keep raw card data off your systems, cut PCI compliance work, improve acceptance, mitigate fraud and chargebacks and decrease your cost of payments, so you keep full control. Trusted by Ramp, Rippling, Modern Treasury and Overwolf; Series B, led by Ribbit Capital.
Responsibilities
•Finding and fixing vulnerabilities in our applications and infrastructure
•Building security checks and tooling into how we develop and ship software
•Working with engineers on security decisions in product and system design
•Owning security and compliance audits, including evidence collection and resolving findings
•Handling customer security reviews and questionnaires, and explaining our controls clearly
•Setting how the security function works, through the code you ship and the practices you help the team adopt
Requirements
•Strong engineering skills: comfortable writing production code, investigating unfamiliar systems and taking a fix through to completion
•Deep, practical security expertise across application and infrastructure security
•Hands-on experience with PCI DSS
•Experience taking audits through to resolution
•You use AI daily and actively look for ways it can improve your work
Nice to have
•Experience in card payments, particularly running or securing a cardholder data environment
•Experience as a first or sole security engineer
•A product company background before Series C
•Rust, Node.js, AWS or Terraform (we care more about engineering ability than our exact stack)
Benefits
•Competitive London Salary
•Stock options with an extended exercise window
•Full, top-tier health insurance
•Generous vacation and flexible working hours
•Define the security function at a fast-growing payments infrastructure company, working closely with the engineers who build it
