Security Engineer at Evervault Limited

Evervault Limited is hiring its first dedicated Security Engineer to own application security for its global payment infrastructure. You will spend half your time on hands-on engineering using Rust and Node.js, and the other half managing high-stakes audits and compliance. This is a defining role for the company’s security culture.

• Find and fix vulnerabilities across applications and infrastructure while building automated security checks into the software development lifecycle.
• Collaborate directly with platform engineers to make critical security decisions during product design and system architecture phases.
• Lead security and compliance audits, including evidence collection and resolving findings for PCI DSS and SOC 2 Type II certifications.

• Professional engineering background with deep security expertise and the ability to write production code in Rust, Node.js, or Go.
• Essential experience with PCI DSS compliance and a proven track record of securing complex cardholder data environments in a product-focused company.
• Proactive problem solver who utilizes AI to improve workflows and has experience managing audits through to resolution in a pre-Series C environment.

• Establish the entire security function from the ground up as the first dedicated hire, defining the practices, tooling, and culture for a critical infrastructure company.
• Work at a high-growth Series B startup backed by premier investors like Sequoia and Kleiner Perkins, serving market leaders in the fintech and payments space.
• Balance deep technical engineering with strategic compliance ownership, staying close to the code while ensuring the highest standards for cardholder data environments.