Junior AppSec Engineer — Hybrid, Hands‑on SSDLC

Checkout.com; Greater London; Hybrid; GBP 42,000 - 65,000; Full time

Benefits offered by this job

Hybrid work model

Job summary

Checkout.com is seeking a Junior Application Security Analyst to join our Information Security team in Greater London. You will help secure Checkout.com’s software throughout the Secure Software Development Lifecycle (SSDLC), working closely with developers and product teams to embed security early in the development process, identify vulnerabilities, and ensure adherence to secure coding standards.

You’ll perform SAST/DAST/SCA scans, API security testing, and support CI/CD pipelines, while

Qualifications

• 1–3 years in application security or related IT/security role.
• Understanding of basic network technologies and protocols (HTTP, TCP/IP, DNS and the OSI model).
• Basic programming experience in Python, JavaScript, or Go.

Responsibilities

• Integrate security controls into the SSDLC and assist in secure coding guidelines.
• Run SAST/DAST/SCA scans and conduct API security testing.
• Support CI/CD pipelines to maintain secure and efficient integration.
• Participate in threat modeling sessions and document threats with mitigation recommendations.
• Triage vulnerabilities from automated scans and track remediation.
• Collaborate with engineering teams to embed security into product design and deliver security training and documentation.

Skills

1–3 years in application security

Understanding of HTTP/TCP/IP/DNS andOS

Basic programming (Python, JavaScript,

Tools

Docker

Kubernetes

GitHub security features

SAST/DAST/SCA tools

Job description

Checkout.com is seeking a Junior Application Security Analyst to join our Information Security team in Greater London. You will help secure Checkout.com’s software throughout the Secure Software Development Lifecycle (SSDLC), working closely with developers and product teams to embed security early in the development process, identify vulnerabilities, and ensure adherence to secure coding standards.

You’ll perform SAST/DAST/SCA scans, API security testing, and support CI/CD pipelines, while