Junior Application Security Analyst: SSDLC & SAST Focus

Checkout Ltd; Greater London; Hybrid; GBP 32,000 - 42,000; Full time

Benefits offered by this job

Hybrid working model

Career growth opportunities

Job summary

Checkout.com is seeking a Junior Application Security Analyst within the Information Security team to help secure our software across the Secure Software Development Lifecycle. You will work with developers to integrate security early in development, identify vulnerabilities, and ensure secure coding practices.

You will gain hands-on experience with SAST, SCA, API security testing, and CI/CD pipelines, while growing expertise in threat modeling, vulnerability management, and collaboration across

Qualifications

• 1–3 years in application security, secure software development, or related IT/security role.
• Understand basic network technologies and protocols (HTTP, TCP/IP, DNS and the OSI model).
• Understanding of common software vulnerabilities and their mitigations.
• Basic programming experience in a popular language (e.g., Python, JavaScript, Golang).
• Understanding of CI/CD pipelines and DevSecOps principles.
• Basic understanding of cloud technologies (AWS, GCP or Azure) and GitHub security features.

Responsibilities

• Assist in integrating security controls into the SSDLC.
• Support the creation and maintenance of secure coding guidelines (e.g., OWASP Top 10, CERT Secure Coding Standards).
• Run a Static Application Security Testing (SAST) and Software Composition Analysis (SCA) scans.
• Conduct API security testing.
• Support CI/CD pipelines to keep secure and effective integration.

Skills

Application security

Secure software development

Security testing

DevSecOps

CI/CD

Python/JavaScript

Cloud basics

Documentation

Tools

SAST tools

DAST tools

SCA tools

API security testing

Docker

Kubernetes

GitHub security features

Job description

Checkout.com is seeking a Junior Application Security Analyst within the Information Security team to help secure our software across the Secure Software Development Lifecycle. You will work with developers to integrate security early in development, identify vulnerabilities, and ensure secure coding practices.

You will gain hands-on experience with SAST, SCA, API security testing, and CI/CD pipelines, while growing expertise in threat modeling, vulnerability management, and collaboration across