AppSec Engineer - Remote-First Security & Threat Testing

Revolut Ltd; España; Híbrido; EUR 60.000 - 90.000; Jornada completa

Ventajas ofrecidas por este puesto de trabajo

Flexible work options

Metal subscription perks

Annual security conferences/events

Descripción de la vacante

Revolut Ltd. is seeking an Application Security Engineer to design and build secure software across our global platforms. You will perform security assessments on product designs, mobile apps, web apps, and APIs, and participate in Red Team exercises to validate detection and response capabilities.

You will lead penetration testing, manage bug bounty submissions, and shape cloud security posture with DevOps across GCP/AWS, while embedding secure practices into the software development lifecycle.

Formación

• 3+ years in application security, pentesting, or security engineering.
• Proficient with web/mobile/API vulnerabilities (OWASP Top 10, CWE).
• Experience in code/design reviews and threat modelling for modern architectures.
• Familiar with DevSecOps and integrating security tooling into CI/CD.
• Knowledge of authentication, authorization, sessions, and cryptographic best practices.
• Proficiency with security tools (Burp Suite, MobSF, Frida, etc.).
• Basic cloud security concepts with GCP or AWS.
• Strong communication and teamwork across Engineering, Product, and DevOps.

Responsabilidades

• Perform security assessments on product designs, apps, web apps, and APIs.
• Lead penetration testing across apps, infrastructure, and APIs using manual and automated methods.
• Manage and evolve private bug bounty programme, validate submissions, coordinate with researchers.
• Contribute to cloud security posture and fix misconfigurations with DevOps across cloud providers.
• Embed security into SDLC by guiding secure architecture and threat modelling with teams.
• Develop and enforce internal AppSec standards aligned with OWASP, NIST, and industry benchmarks.
• Stay updated on new threats, tools, and security research; mentor junior team members.

Conocimientos

Security testing

Threat modelling

OWASP

DevSecOps

Authentication & cryptography

Security tooling

Cloud security

Communication

Herramientas

Burp Suite

MobSF

Frida

Custom scripts

Descripción del empleo

Revolut Ltd. is seeking an Application Security Engineer to design and build secure software across our global platforms. You will perform security assessments on product designs, mobile apps, web apps, and APIs, and participate in Red Team exercises to validate detection and response capabilities.

You will lead penetration testing, manage bug bounty submissions, and shape cloud security posture with DevOps across GCP/AWS, while embedding secure practices into the software development lifecycle.