Product security engineer in payments

Paymentsense; Greater London; On-site; GBP 70,000 - 100,000; Full time

Job summary

Dojo ищет специалиста по кибербезопасности для внедрения практик SecDevOps и защиты приложений на этапах разработки и эксплуатации.

Кандидат будет работать с облачными платформами GCP/AWS, Kubernetes и проводить threat modelling, архитектурные обзоры и оценку рисков в тесном сотрудничестве с инженерной командой.

Qualifications

• Опыт в кибербезопасности приложений и Secure SDLC.
• Навыки применения CI/CD security tooling и threat modelling.

Responsibilities

• Сотрудничать с инженерами ПО для внедрения и повышения защиты на протяжении жизненного цикла продукта.
• Проводить обзоры архитектуры, threat modelling, оценку рисков, формулировать планы исправления.

Skills

Cyber Security

Application Security

Secure SDLC

Job description

Описание

We’re reinventing payments. In less than four years, Dojo disrupted the market to become the largest and most loved acquirer in the UK. Our payments infrastructure, purpose-built for in-person commerce, is game changing.Now, over 150,000 customers across four countries choose to transact billions with us every year. But we’re just getting started. Our people are the driving force behind our success. They are our greatest investment and our ultimate competitive advantage. We hire exceptional people and give them the autonomy, trust, and ownership to thrive.

Задачи

Collaborate closely with software engineers to integrate and enhance security practices throughout the product lifecycle. Establish defence-in-depth security requirements that align seamlessly with our technology strategy and business objectives. Conduct architecture reviews and threat modelling across cloud (GCP and AWS) and containerised environments. Risk-assess and prioritise findings from reviews, penetration testing, and AppSec/CSPM tooling, delivering actionable remediation guidance.

Требования

Proven experience in Cyber Security, Application Security, or Secure Software Development. Strong understanding of the Secure Development Lifecycle (SDLC), DevSecOps best practices, and CI/CD security tooling. Demonstrated experience conducting threat modelling, security architecture reviews, and risk assessments. Familiarity with cloud security (GCP/AWS), Kubernetes environments, and penetration testing or vulnerability management. A pragmatic, collaborative mindset with the ability to partner effectively with engineering teams and adapt to a fast-growing scaleup environment.

Условия

This means working from the office 4+ days per week.