Application Security Specialist

As a Junior Application Security Analyst, you help secure Checkout.com’s software throughout the Secure Software Development Lifecycle. You collaborate with engineers to embed security into development, oversee vulnerability remediation, and promote secure coding practices. The role blends hands-on security work with growth in application security expertise. You will contribute to building secure, scalable fintech software and be part of a fast-moving team.

• Assist in integrating security controls into the SSDLC
• Support secure coding guidelines (e.g., OWASP Top 10, CERT Secure Coding Standards)
• Run SAST and SCA scans and perform API security testing
• Support CI/CD pipelines to maintain secure integration
• Participate in threat modeling sessions and document findings
• Assist in code and system reviews for product security
• Triage and prioritise vulnerabilities from automated scans
• Track remediation of security flaws and help automate AppSec pipelines
• Collaborate with engineering teams to embed security into product design
• Deliver SSDLC training and contribute to security documentation

• 1–3 years in application security, secure software development, or related IT/security role
• Basic understanding of networks and protocols (HTTP, TCP/IP, DNS, OSI)
• Understanding of common software vulnerabilities and mitigations
• Basic programming in a popular language (Python, JavaScript, Golang)
• Understanding of CI/CD pipelines and DevSecOps principles
• Basic understanding of cloud technologies (AWS, GCP or Azure) and GitHub security features
• Strong attention to detail in documentation and assessments

• Eager to learn and expand technical skills
• Effective communicator with technical and non-technical audiences
• Collaborative and proactive problem solver
• Familiarity with SAST/DAST/SCA tools and API security testing platforms
• Exposure to cloud-native application security (AWS, Azure, GCP)
• Understanding of container security (Docker, Kubernetes)