Application Security Engineer - Build Secure FinTech Apps

Revolut; España; On-site; EUR 75,000 - 110,000; Full time

Job summary

Revolut is seeking an Application Security Engineer to design, test, and safeguard our software across web, mobile, and APIs. You will participate in threat-led testing, perform comprehensive security assessments, and help drive secure practices across engineering teams.

You will collaborate with DevOps and product teams to improve cloud security, implement OWASP/NIST-aligned standards, and mentor junior engineers in secure engineering methods.

Qualifications

• 3+ years of hands-on experience in application security, penetration testing, or related security engineering.
• Solid understanding of OWASP Top 10, CWE, and practical remediation approaches.
• Experience conducting code reviews, design reviews, and threat modelling for modern application architectures.
• Familiarity with DevSecOps practices and integrating security tooling into CI/CD pipelines.
• Working knowledge of authentication, authorisation, session management, and cryptographic best practices.

Responsibilities

• Performing security assessments on product designs, mobile apps (iOS/Android), web applications, and APIs.
• Participating in Red Team missions and threat-led testing scenarios to simulate real-world attacker behaviours and validate detection and response capabilities.
• Leading and conducting penetration testing across applications, infrastructure, and APIs, using a mix of manual techniques and automated tools.
• Managing and evolving our private bug bounty programme, validating submissions, collaborating with researchers, and ensuring timely resolution of valid findings.
• Contributing to and influencing cloud security posture, identifying misconfigurations and working with DevOps to implement best practices across GCP and AWS.
• Partnering closely with engineering teams to embed security into the software development lifecycle, offering guidance on secure architecture and threat modelling.
• Developing and enforcing internal AppSec standards, policies, and practices aligned with OWASP, NIST, and industry benchmarks.
• Continuously researching and evaluating emerging threats, tools, and technologies to stay ahead of the evolving threat landscape.
• Contributing to internal security training sessions, knowledge sharing, and mentoring of junior team members

Skills

Application security

Penetration testing

Threat modelling

DevSecOps

Cloud security

Burp Suite

Code reviews

Security tooling

Communication

Tools

MobSF

Frida

Burp Suite

Custom scripts

Job description

Revolut is seeking an Application Security Engineer to design, test, and safeguard our software across web, mobile, and APIs. You will participate in threat-led testing, perform comprehensive security assessments, and help drive secure practices across engineering teams.

You will collaborate with DevOps and product teams to improve cloud security, implement OWASP/NIST-aligned standards, and mentor junior engineers in secure engineering methods.