Application Security Engineer: Build Secure, Threat‑Led Apps

Revolut; Porto; Hybrid; EUR 70,000 - 95,000; Full time

Job summary

Revolut is seeking an Application Security Engineer to safeguard our software across mobile, web, and API surfaces. You’ll design and build security into products, perform assessments, and lead threat-led testing in a fast-paced environment.

You will collaborate with engineering, DevOps, and product teams to enforce secure architecture, drive bug bounty efforts, and stay ahead of evolving threats. Porto-based hybrid work is available with a strong security culture.

Qualifications

• 3+ years of hands-on application security, pen testing, or related role.
• Solid understanding of OWASP Top 10, CWE, and remediation approaches.
• Experience with code reviews, design reviews, and threat modelling.

Responsibilities

• Perform security assessments for product designs, apps, web, and APIs.
• Lead penetration testing across applications, infra, and APIs.
• Manage private bug bounty program and coordinate with researchers.
• Improve cloud security posture with DevOps on GCP/AWS.
• Collaborate with engineering to embed security in SDLC.

Skills

Application security

Penetration testing

Cloud security

DevSecOps

Threat modelling

Burp Suite

MobSF

Frida

Git/CICD

Tools

Burp Suite

MobSF

Frida

Custom scripts

Job description

Revolut is seeking an Application Security Engineer to safeguard our software across mobile, web, and API surfaces. You’ll design and build security into products, perform assessments, and lead threat-led testing in a fast-paced environment.

You will collaborate with engineering, DevOps, and product teams to enforce secure architecture, drive bug bounty efforts, and stay ahead of evolving threats. Porto-based hybrid work is available with a strong security culture.