Application Security Specialist

Checkout.com is hiring an Application Security Specialist in London, United Kingdom. Level rates it ; you can apply on Checkout.com.

Level's read on this job

Little AI ●○○○ is how Level rates this role: aI is not part of the work.
Level lists 170 other open roles at Checkout.com.
The role was posted in the last few days.

AI in this role

Company Description

We’re Checkout.com. You might not know our name, but companies like eBay, Spotify, Klarna, Uber, and Sony do, because we’re behind many of the digital experiences you use every day.

We are where the world checks out, enabling over 10 billion transactions yearly for more than one billion global shoppers.

Whether you want to book a holiday, order food, renew a subscription, or check out online, there’s a good chance our tech powers the payments behind the scenes. Our platform helps the most ambitious businesses deliver effortless digital experiences, at scale.

If you want to do career-defining work, you’ve come to the right place. We move fast, think globally, and believe great teams are built by hiring exceptional people with conviction, curiosity, and the desire to make an impact.

With 20 offices across six continents and London as our HQ, we’re shaping the future of fintech – and we’re just getting started.

Role Overview

As a Junior Application Security Analyst in the Information Security team, you will help secure Checkout.com’s software applications throughout the Secure Software Development Lifecycle (SSDLC). You will work closely with developers and product teams to integrate security early in the development process, identify and oversee the remediation of vulnerabilities, and ensure adherence to secure coding practices and application security standards. This role focuses on practical, hands-on security support while also growing your expertise in application security.

Key Responsibilities

SSDLC & Secure Coding

Assist in integrating security controls into the SSDLC.
Support the creation and maintenance of secure coding guidelines (e.g., OWASP Top 10, CERT Secure Coding Standards).

Application Security Testing

Run a Static Application Security Testing (SAST) and Software Composition Analysis (SCA) scans.
Conduct API security testing.
Support CI/CD pipelines to keep secure and effective integration.

Threat Modeling & Application Security Analysis

Participate in threat modeling sessions.
Document identified threats, assess risks and provide mitigation recommendations.
Assist in code and system reviews to analyse security in company’s products.

Vulnerability Management

Triage and prioritise vulnerabilities from automated scans.
Track, verify and ensure security flaws remediation.
Assist to automate an AppSec pipelines

Collaboration & Awareness

Collaborate with engineering teams to integrate security into product design and improve existing systems.
Help deliver training and awareness on SSDLC best practices and secure coding.
Contribute to security documentations.

Required Skills & Experience

1–3 years in application security, secure software development, or related IT/security role.
Understand basic network technologies and protocols (HTTP, TCP/IP, DNS and the OSI model).
Understanding of common software vulnerabilities and their mitigations.
Basic programming experience in a popular language (e.g., Python, JavaScript, Golang).
Understanding of CI/CD pipelines and DevSecOps principles.
Basic understanding of cloud technologies (AWS, GCP or Azure) and GitHub security features.
Strong attention to detail in documentation and assessments.

Preferred

Familiarity with SAST/DAST/SCA tools and API security testing platforms.
Exposure to cloud-native application security (AWS, Azure, GCP).
Understanding of container security (Docker, Kubernetes).
Experience of participating in Capture The Flag (CTF) competitions.

Key Competencies

Eager to learn and expand technical skills in application security.
Effective communicator with both technical and non-technical audiences.
Collaborative and proactive problem solver.
Ability to prioritise work.

Additional Information

Bring all of you to work

We create the conditions for high performers to thrive, through real ownership, fewer blockers, and work that makes a difference from day one.

Here, you’ll move fast, take on meaningful challenges, and be recognized for the impact you deliver. It’s a place where ambition gets met with opportunity, and where your growth is in your hands.

We work as one team, and we back each other to succeed. So whatever your background or identity, if you’re ready to grow and make a difference, you’ll be right at home here.

It’s important we set you up for success and make our process as accessible as possible. So let us know in your application, or tell your recruiter directly, if you need anything to make your experience or working environment more comfortable.

Life at Checkout.com

We understand that work is just one part of your life. Our hybrid working model offers flexibility, with three days per week in the office to support collaboration and connection.

Curious about what it’s like to be part of our team? Visit our Careers Page to learn more about our culture, open roles, and what drives us.

For a closer look at daily life at Checkout.com, follow us on LinkedIn and Instagram

How we rate this

Application Security Specialist at Checkout.com rates 28 out of 100 for how much of the daily work is AI. That makes it Little AI (AI Level 1 of 4). The level is about AI in the job, not seniority.

Classification

Little AI. AI is not part of the work.

●●●● Builds AI80 to 100
●●●○ Works on AI60 to 79
●●○○ Uses AI40 to 59
●○○○ Little AI0 to 39

Levels come from how often the tools, models and workflows of the role are named in the posting itself. Read the description and count the AI tools, models and workflows it names.