
How your CV stacks up
Upload your CV to see how well it fits this job role
?%
An Introduction to Primer
Primer is the unified infrastructure for global payments. We give finance and payments teams the visibility and control to reduce complexity, improve performance, and capture more revenue - all from a single platform.
Backed by Sofina, Peak XV Partners, ICONIQ, Tencent, Accel, and Balderton, we're building the payments layer the world's best companies rely on.
- Watch our showcase >
- Read up on our $100m Series C
- Learn more about our culture >
Which team will you be joining?
You’ll help build the entire product security surface for a company processing payments at scale: threat modelling, security review, compliance, incident escalation, and the multi-year AppSec roadmap. You'd be the second hire, and the person that function finally gets to share the work with.
This is a hands-on delivery role, and a genuinely formative one. You’ll help set the security strategy and architecture; you take real ownership of the work that turns it into reality, reviews, research, automation, and the day-to-day partnership with engineering teams. You'll have a clear direction to work within and someone senior to learn from, while still owning your projects end to end.
Security at Primer sits close to the engineering teams it protects rather than off to one side, so you'll spend real time embedded with the people building Cloud, Infra, and product. For someone who wants to go deep in product security with room to grow, there are few better seats than being the second engineer in a function that's only now scaling.
What will you be doing?
- Running security reviews and threat modelling on features and systems across Primer's product, and turning findings into clear, actionable guidance for the teams shipping them
- Independently planning and delivering your own security projects, from initial design through to rollout
- Building tooling and automation that makes future reviews faster and cheaper to run
- Coordinating penetration testing and tracking remediation through to closure
- Supporting the recurring compliance work (SOC2, PCI), including evidence collection and remediation tracking against fixed audit windows
- Contributing to AppSec roadmap initiatives across areas like application threats, AI security, supply chain security, and ASPM
- Picking up proactive security work, threat research and hands-on investigation, that a one-person function has never had the capacity for
- Working alongside Cloud, Infra, and GRC on the security aspects of their projects
Reasons to use Rodeo
I’m in my final year doing Economics and I don’t know whether to apply for grad schemes now or do a masters first. What do you think?
Honest answer — it depends on where you want to end up. A lot of top grad schemes (Big 4, civil service, banking) don’t need a masters. Let’s look at the ones you’d be competitive for now, and we can decide if a masters actually adds anything.
Also worth knowing: most autumn 2026 applications are open now. Timing matters more than you think.
Start with a chat, not a search bar
Grad scheme, placement, apprenticeship? Not sure what you want yet — that's fine. Your agent talks it through with you and turns "I have no idea" into a shortlist.
Graduate Consultant — 2026 Scheme
Why you're a good match
StrongYour economics background and your summer at a regional bank line up with what PwC looks for on the consulting scheme. Applications close in four weeks.
See breakdownIt searches the market for you
Every day your agent scans the market matching roles against what actually matters to you, not just keywords on a CV.
Why you're a good match
You’ve got the grades and the economics background, and your bank internship is exactly the experience this scheme looks for. Apply soon — deadlines close within the month.
Experience fit
Your summer at the bank plus your econometrics coursework map directly to the day-one responsibilities on this scheme — client modelling, market briefings, and deal support.
Only hits
No noise. No "maybe this fits." Just roles with a clear explanation of why they're right — and where to focus when applying.
What we're looking for
- Working experience in product or application security: you've done security reviews or threat modelling and can spot the risks that matter
- The ability to read and write code, not just review it. You're comfortable building small tools and automation rather than only filing findings
- Sound judgement about risk. You can weigh a real threat against a theoretical one and explain your reasoning clearly
- The ability to plan and deliver your own work independently once you understand the direction, while knowing when to pull in the senior engineer
- Clear communication with engineers who aren't security specialists, since most of your impact lands through their work
Nice To Have
- Exposure to compliance frameworks like SOC2 or PCI, or genuine appetite to learn them
- Background in payments, fintech, or another regulated, high-stakes domain
- Interest in areas like supply chain security, detection engineering, or AI security
You may not like it here
- It's remote-first and high autonomy. You'll get direction, but nobody checks your progress daily. If you need close structure, this will be uncomfortable
- You'll move between proactive project work and reactive BAU, and priorities will shift as audits and incidents land. Tolerating that change is part of the role.
A typical interview process
- An initial intro call with a Talent Partner
- An interview with the Hiring Manager
- Challenge Stage - Contextualised to the role
- A final, values-alignment interview
What's the culture like at Primer?
We're building a culture where people can do their best work and be proud of the impact they have. You'll be working with people who are mission-driven, smart, and reflective, and who are genuinely invested in building exceptional products and delivering success for our merchants.


Get help with your application
Your very own career expert that helps elevate your application to the next level.
We work remotely, and have done since day one. We believe that building a successful, profitable company goes beyond proximity. We invest in our relationships through great remote working practices and thoughtfully designed face-to-face time, including workations, our annual company retreat, and access to co-working spaces across most major cities.
The work is challenging. Scaleups are a challenge, and building category-defining products is a challenge. But there's a meaningful difference between a challenge and a struggle. At Primer, the right challenge comes with the right support: strong onboarding, a collaborative environment, and a team that is genuinely invested in your success. It's never something you face alone.
Our benefits
- 🌍 We are fully remote and globally distributed; and have been since day one
- 💰 Competitive share options
- 🌴 Uncapped holiday, with 25 days minimum to be taken
- 🗣️ Co-working space access across major cities
- 📅 Workations & Company Retreat
- 💻 The best equipment for your role
- 🏠 £500 towards your home office setup
- 🔎 Generous learning budget
- 🏥 Private Medical Insurance
- 📈 A broad set of additional perks and benefits (depending on location)
Don’t meet every single requirement?
At Primer, we're dedicated to building a diverse, inclusive, and authentic workplace. If you're excited about this role but your experience doesn't align perfectly with every qualification listed, we encourage you to apply. You may be the right candidate for this or other roles.
Primer is committed to the equal treatment of all current and prospective employees and adopts a zero-tolerance approach to discrimination, regardless of age, disability, sex, sexual orientation, pregnancy and maternity, race or ethnicity, religion or belief, gender identity, marriage and civil partnership, or any other background or belief.
“It took my CV and asked me questions relevant to understanding what kind of jobs to suggest for me. Suggestions were almost perfect. Jobs were exactly what I’ve been looking for.”
Jessica, London
Skills
Location