Junior Security Engineer

Pavebank; Singapore; On-site; SGD 48,000 - 75,000; Full time

Job summary

Pave Bank is hiring a Junior Security Engineer to act as a guardian of our platform, identifying weaknesses and guiding engineers toward secure solutions. The role offers hands-on exposure across the full security lifecycle, from code review to penetration testing, with mentorship from experienced engineers.

You will learn through practical, project-based work, collaborate with Product and Engineering teams, and contribute to shaping security practices as we scale our programmable bank

Qualifications

• Need an adversary-first mindset and ability to think like an attacker.
• Familiarity with attacker tools and techniques; knowledge of OWASP Top 10.
• Proficiency in at least one modern language (Go, Python, or TypeScript).
• Strong communication skills to explain security concepts to varied audiences.
• Self-motivated with a genuine drive to learn and grow in security.

Responsibilities

• Review platform and product code to identify security issues and guide engineers toward secure solutions.
• Build internal tools, libraries, and automation to improve security testing and enforcement.
• Continuously test internal and external applications for vulnerabilities.
• Support third-party application security reviews and penetration tests.
• Help educate engineering and product teams on secure coding and design practices.
• Stay current on emerging threats and assess their impact on our systems.

Skills

Adversary-first mindset

OWASP Top 10 familiarity

Go

Python

TypeScript

Communication

Self-motivation

Tools

Security tooling

CTFs

Bug bounties

Open-source contributions

Job description

About Pave Bank

Pave Bank is the world's first programmable business bank. Built by the founders behind Monzo and BigPay, we're redefining global business banking by combining programmable financial infrastructure with world-class client experiences.

About the Role

We're looking for a Junior Security Engineer who is independent, curious, and has an adversary first mindset - someone who thinks like an attacker to keep our platform secure.

You’ll be a critical guardian of Pave Bank: identifying weaknesses, closing loopholes, and empowering our Product and Engineering teams to ship quickly without compromising security.

You’ll get hands‑on exposure across the full security lifecycle - from code review to penetration testing - with mentorship from experienced engineers.

What You'll Do

• Review platform and product code to identify security issues and guide engineers toward secure solutions
• Build internal tools, libraries, and automation to improve security testing and enforcement
• Continuously test internal and external applications for vulnerabilities
• Support third‑party application security reviews and penetration tests
• Help educate engineering and product teams on secure coding and design practices
• Stay current on emerging threats and attack techniques, and assess how they apply to our systems

What We're Looking For

Must have

• An adversary‑first mindset - you instinctively ask "how would I break this?"
• Familiarity with common attacker tools and techniques, and how insecure development practices get exploited (e.g. OWASP Top 10)
• Programming experience in at least one modern language (Go, Python, or TypeScript).
• Clear communication skills - you can explain security concepts to technical and non‑technical audiences alike.
• Self‑motivation and a genuine drive to keep learning

Nice to have

• Exposure to blockchain technologies and cryptocurrency systems, and their security implications
• Experience with security tooling, CTFs, bug bounties, or open‑source security contributions
• Prior internship or work experience in a fast‑moving startup environment

Why Join Us

We recently raised a $39M Series A led by Accel, positioning us for major growth - a rare chance to join while things are still moving fast

We're building a fully‑licensed programmable bank, rearchitecting how money moves between businesses, across borders, and between traditional and digital finance

We ship fast, think deeply, and expect high ownership - your work will hit production quickly across several parts of the business

You'll work alongside engineers from Monzo, Atom Bank, Blockdaemon, GXS, and Grab

Originally posted on Himalayas