Requirements

1–3 years in application security, secure software development, or related IT/security role.
Understand basic network technologies and protocols (HTTP, TCP/IP, DNS and the OSI model).
Understanding of common software vulnerabilities and their mitigations.
Basic programming experience in a popular language (e.g., Python, JavaScript, Golang).
Understanding of CI/CD pipelines and DevSecOps principles.
Basic understanding of cloud technologies (AWS, GCP or Azure) and GitHub security features.
Strong attention to detail in documentation and assessments.

Nice to haves

Assist in integrating security controls into the Secure Software Development Lifecycle (SSDLC).
Support creation and maintenance of secure coding guidelines such as OWASP Top 10 and CERT Secure Coding Standards.
Run Static Application Security Testing (SAST) and Software Composition Analysis (SCA) scans.
Conduct API security testing and support secure integration in CI/CD pipelines.
Participate in threat modeling sessions and document identified threats with risk assessments and mitigations.
Assist in code and system reviews to analyze application security.
Triage, prioritize, and track vulnerabilities from automated scans ensuring remediation.
Help automate Application Security (AppSec) pipelines.
Collaborate with engineering teams to integrate security into product design and enhance existing systems.
Deliver training and raise awareness on SSDLC best practices and secure coding.
Contribute to security documentation.

Hybrid working model with three days per week in the office supporting collaboration and connection.
Culture of real ownership, fewer blockers, and meaningful work from day one.
Opportunity for personal growth and development in a fast-moving global fintech environment.
Inclusive and supportive team environment valuing diversity and accessibility in the workplace.