Application Security Engineer: Threat Modeling & Pen Tests

Revolut; Polska; On-site; PLN 180,000 - 240,000; Full time

Job summary

Revolut is seeking an experienced Application Security Engineer to join our Technology team. You will design, test, and protect our software, working across mobile, web, and API platforms to safeguard millions of users worldwide.

Join a fast-paced, security‑minded culture where you’ll influence secure architecture, run threat modeling, and lead vulnerability detection and response efforts while collaborating closely with Engineering, Product, and DevOps teams.

Qualifications

• > 3+ years in application security, pentesting, or related security engineering role
• > Understanding of web, mobile, API vulnerabilities and remediation approaches
• > Experience in code/design reviews and threat modelling for modern architectures
• > Familiarity with DevSecOps and CI/CD tooling
• > Knowledge of authentication, authorization, session management, and cryptography best practices
• > Proficiency with security tools for dynamic and static analysis
• > Basic cloud security concepts with GCP or AWS
• > Strong communication and collaboration with engineering teams
• > Proactive, independent, and team-focused mindset

Responsibilities

• Perform security assessments on product designs, apps, and APIs
• Lead penetration testing across applications, infrastructure, and APIs
• Manage and evolve bug bounty program and coordinate with researchers
• Influence cloud security posture with DevOps on GCP/AWS
• Embed security into SDLC with guidance on secure architecture
• Develop and enforce internal AppSec standards aligned with OWASP/NIST
• Research emerging threats and evaluate new security tools
• Contribute to security training and mentoring of juniors

Skills

Application security

Penetration testing

Threat modelling

DevSecOps

Cloud security

Burp Suite

CI/CD security

OWASP Top 10

Communication

Tools

Burp Suite

MobSF

Frida

Custom scripts

Job description

Revolut is seeking an experienced Application Security Engineer to join our Technology team. You will design, test, and protect our software, working across mobile, web, and API platforms to safeguard millions of users worldwide.

Join a fast-paced, security‑minded culture where you’ll influence secure architecture, run threat modeling, and lead vulnerability detection and response efforts while collaborating closely with Engineering, Product, and DevOps teams.