AppSec Engineer (Remote) — Secure Apps & APIs

Revolut; United Arab Emirates; Hybrid; AED 331,000 - 551,000; Full time

Job summary

Revolut is seeking an Application Security Engineer to design, test and harden our fintech platform across mobile, web, and APIs. You’ll own security assessments, lead penetration testing, and help shape threat modelling with product and engineering teams.

You’ll work on cloud security (GCP/AWS), run a private bug bounty program, and advance secure SDLC practices across the stack while mentoring junior engineers in a fast-paced, collaborative environment.

Qualifications

• 3+ years hands-on application security or security engineering.
• OWASP Top 10 / CWE familiarity and remediation approaches.
• Code reviews, design reviews, and threat modelling for modern apps.
• DevSecOps practices and integrating security tooling into CI/CD pipelines.
• Authentication, authorization, session management, and cryptographic best practices.
• Proficiency with Burp Suite, MobSF, Frida, and custom scripts for analysis.
• Cloud security principles with GCP or AWS environments.
• Strong communication with Engineering, Product, and DevOps teams.
• Independent and proactive approach in a fast-paced environment.

Responsibilities

• Performing security assessments on product designs, mobile apps, web apps, and APIs.
• Leading and conducting penetration testing across applications, infrastructure, and APIs.
• Participating in Red Team missions and threat-led testing scenarios to simulate attackers.
• Managing and evolving private bug bounty programmes, validating submissions, and coordinating with researchers.
• Influencing cloud security posture and guiding DevOps to implement best practices in GCP and AWS.
• Partnering with engineering teams to embed security in the software development lifecycle.
• Developing and enforcing internal AppSec standards aligned with OWASP, NIST, and industry benchmarks.
• Researching emerging threats, tools, and technologies to stay ahead.

Job description

Revolut is seeking an Application Security Engineer to design, test and harden our fintech platform across mobile, web, and APIs. You’ll own security assessments, lead penetration testing, and help shape threat modelling with product and engineering teams.

You’ll work on cloud security (GCP/AWS), run a private bug bounty program, and advance secure SDLC practices across the stack while mentoring junior engineers in a fast-paced, collaborative environment.