checkout.com - Application Security Specialist
Requirements
• 1–3 years in application security, secure software development, or related IT/security role. • Understand basic network technologies and protocols (HTTP, TCP/IP, DNS and the OSI model). • Understanding of common software vulnerabilities and their mitigations. • Basic programming experience in a popular language (e.g., Python, JavaScript, Golang). • Understanding of CI/CD pipelines and DevSecOps principles. • Basic understanding of cloud technologies (AWS, GCP or Azure) and GitHub security features. • Strong attention to detail in documentation and assessments. • Familiarity with SAST/DAST/SCA tools and API security testing platforms. • Exposure to cloud-native application security (AWS, Azure, GCP). • Understanding of container security (Docker, Kubernetes). • Experience of participating in Capture The Flag (CTF) competitions. • KEY COMPETENCIES • Effective communicator with both technical and non-technical audiences. • Collaborative and proactive problem solver. • Ability to prioritise work. • It’s important we set you up for success and make our process as accessible as possible. So let us know in your application, or tell your recruiter directly, if you need anything to make your experience or working environment more comfortable. • Life at Checkout.com http://Checkout.com • We understand that work is just one part of your life. Our hybrid working model offers flexibility, with three days per week in the office to support collaboration and connection. • Curious about what it’s like to be part of our team? Visit our Careers Page https://www.checkout.com/careers to learn more about our culture, open roles, and what drives us. • For a closer look at daily life at Checkout.com http://Checkout.com, follow us on LinkedIn https://www.linkedin.com/company/checkout/life/ and Instagram https://www.instagram.com/checkout_com/
Responsibilities
• SSDLC & Secure Coding • Assist in integrating security controls into the SSDLC. • Support the creation and maintenance of secure coding guidelines (e.g., OWASP Top 10, CERT Secure Coding Standards). • Application Security Testing • Run a Static Application Security Testing (SAST) and Software Composition Analysis (SCA) scans. • Conduct API security testing. • Support CI/CD pipelines to keep secure and effective integration. • THREAT MODELING & APPLICATION SECURITY ANALYSIS • Participate in threat modeling sessions. • Document identified threats, assess risks and provide mitigation recommendations. • Assist in code and system reviews to analyse security in company’s products. • VULNERABILITY MANAGEMENT • Triage and prioritise vulnerabilities from automated scans. • Track, verify and ensure security flaws remediation. • Assist to automate an AppSec pipelines • COLLABORATION & AWARENESS • Collaborate with engineering teams to integrate security into product design and improve existing systems. • Help deliver training and awareness on SSDLC best practices and secure coding. • Contribute to security documentations.
Apply in one click
Upload My Resume
Drop here or click to browse · Tap to choose · PDF, DOCX, DOC, RTF, TXT