Remote Jobs RockRemote Jobs Rock

Security Engineer

🕒 21 days ago
Application SecuritySecurity EngineeringPCI DSSCard Payments
Apply Now

📜 Description

  • Find and fix vulnerabilities across applications and infrastructure.
  • Build security checks and tooling into software development and release workflows.
  • Advise engineers on security decisions in product and system design.
  • Own security and compliance audits, including evidence collection and resolving findings.
  • Handle customer security reviews and questionnaires, and explain security controls.
  • Help establish the security function through shipped code, risk management, and team practices.

🛠️ Requirements

  • Strong engineering skills and practical security expertise, including the ability to write production code and take fixes through to completion.
  • Hands-on experience with PCI DSS.
  • Experience with card payments or securing a cardholder data environment is a strong signal.
  • Experience taking audits through to resolution and working at a product company before Series C.
  • Daily use of AI and an ability to make progress on loosely defined problems.
  • Experience as a first or sole security engineer is valuable.

✨ Benefits

  • Top-tier health insurance.
  • Generous vacation.
  • Flexible working hours.
Full job description

About Evervault

Evervault offers modular payments infrastructure for companies building their own payments stack. We keep raw card data off your systems, cut PCI compliance work, improve acceptance, mitigate fraud and chargebacks and decrease your cost of payments, so you keep full control. Trusted by Ramp, Rippling, Modern Treasury and Overwolf; Series B, led by Ribbit Capital.

Role Overview

We're hiring our first dedicated Security Engineer. You'll join our platform group and own application security from day one, with scope to take on security across Evervault over time. Expect roughly half your first year on hands-on security engineering and half on audits, questionnaires and customer security reviews. Both are core to the job.

What You'll Be Doing

  • Finding and fixing vulnerabilities in our applications and infrastructure

  • Building security checks and tooling into how we develop and ship software

  • Working with engineers on security decisions in product and system design

  • Owning security and compliance audits, including evidence collection and resolving findings

  • Handling customer security reviews and questionnaires, and explaining our controls clearly

  • Setting how the security function works, through the code you ship and the practices you help the team adopt

Requirements

  • Strong engineering skills: comfortable writing production code, investigating unfamiliar systems and taking a fix through to completion

  • Deep, practical security expertise across application and infrastructure security

  • Hands-on experience with PCI DSS

  • Experience taking audits through to resolution

  • You use AI daily and actively look for ways it can improve your work

Nice to Have

  • Experience in card payments, particularly running or securing a cardholder data environment

  • Experience as a first or sole security engineer

  • A product company background before Series C

  • Rust, Node.js, AWS or Terraform (we care more about engineering ability than our exact stack)

This Might Not Be for You If…

  • You want pure offensive or research work: around half the role is audits, questionnaires and customer reviews

  • You want to manage people soon: this is an individual contributor role with no immediate management remit

  • You need a tightly defined brief: you'll be shaping the security function as you go

  • You want to work fully remotely: we're in our Shoreditch office Tuesday to Thursday

Compensation, Benefits & Why Join

  • Competitive London Salary

  • Stock options with an extended exercise window

  • Full, top-tier health insurance

  • Daily lunch budget

  • Unlimited PTO

  • Cyclescheme

  • Define the security function at a fast-growing payments infrastructure company, working closely with the engineers who build it

Interview Process

  1. Recruiter screen

  2. Hiring manager interview

  3. Technical interview #1

  4. Technical interview #2

  5. Final Founder interview

  6. References and offer

Location

This role is based in London, in our Shoreditch office Tuesday to Thursday. We do not currently sponsor UK work visas.

Candidates must be based in the location specified. Any applications from candidates not in the required location may not receive a response.

Tipalti

Product Security Architect

🕒 5 days ago
Tipalti👥 1001 - 5000 employees🏢 Financial Services

Own hands-on product security across the software development lifecycle, reviewing applications and code, modeling threats, validating vulnerabilities, and guiding engineering teams on practical remediation and security improvements.

Product SecurityApplication SecurityThreat ModelingSecurity Code Review
Mobius

Senior Cybersecurity Engineer

🕒 2 days ago
Mobius👥 Small🏢 Professional Services🤝 B2B

Provides cybersecurity engineering support for U.S. Navy aircraft carrier systems, including security requirements, risk assessments, RMF, testing and authorization, and resilient system integration.

Cybersecurity EngineeringCyber DefenseRisk Management Framework (rmf)Risk Assessment
Careportalinc

Product Security Engineer

🕒 8 days ago
Careportalinc👥 201 - 500 employees🏢 Hospital & Health Care

Build code-driven security tools and infrastructure, partner with product engineers to design secure features, improve cloud and IAM configurations, and help teams resolve vulnerabilities without slowing delivery.

Product SecuritySoftware DevelopmentPythonGo
Lumos

Senior Security Engineer

🕒 3 days ago
Lumos👥 51 - 200 employees🏢 Computer Software

Design and operate security foundations for an identity platform, lead cross-team security projects, assess new products through threat modeling, and strengthen least-privilege access across production systems.

Application SecurityProduct SecurityPlatform SecurityBackend Engineering
Oshi Health

Senior Application Security Engineer

🕒 8 days ago
Oshi Health👥 51 - 200 employees🏢 Health Care

Own application and cloud security for a healthcare platform, setting security architecture and strengthening identity, secrets, and engineering workflows while addressing risks from AI systems and third-party integrations.

Application SecurityProduct SecurityCloud SecurityAWS

Trusted by Remote Workers