Application Security Specialist

The role

You will help secure software applications throughout the Secure Software Development Lifecycle. You will work with developers and product teams to integrate security, identify vulnerabilities, and ensure adherence to secure coding practices.

What you will do

• Assist in integrating security controls into the SSDLC.
• Support the creation and maintenance of secure coding guidelines.
• Run Static Application Security Testing (SAST) and Software Composition Analysis (SCA) scans.
• Conduct API security testing.
• Support CI/CD pipelines.
• Participate in threat modeling sessions.
• Document identified threats, assess risks and provide mitigation recommendations.
• Assist in code and system reviews.
• Triage and prioritise vulnerabilities from automated scans.
• Track, verify and ensure security flaws remediation.

Required qualifications

• 1–3 years in application security, secure software development, or related IT/security role.
• Understand basic network technologies and protocols (HTTP, TCP/IP, DNS and the OSI model).
• Understanding of common software vulnerabilities and their mitigations.
• Basic programming experience in a popular language (e.g., Python, JavaScript, Golang).
• Understanding of CI/CD pipelines and DevSecOps principles.
• Basic understanding of cloud technologies (AWS, GCP or Azure) and GitHub security features.
• Strong attention to detail in documentation and assessments.

Nice to have

• Familiarity with SAST/DAST/SCA tools and API security testing platforms.
• Exposure to cloud-native application security (AWS, Azure, GCP).
• Understanding of container security (Docker, Kubernetes).
• Experience of participating in Capture The Flag (CTF) competitions.

About the company

Checkout.com enables over 10 billion transactions yearly for more than one billion global shoppers. The company has 20 offices across six continents with London as HQ.