Pro members applied to this job 36 hours before you saw itGet Pro ›

lendable - Application Security Engineer

Remote - UK+ Equity5d ago

Remote EMEA Cloud Computing Artificial Intelligence Application Security Engineer Product Manager Kotlin GraphQL React Native React Risk Management

Upload My Resume

Drop here or click to browse · PDF, DOCX, DOC, RTF, TXT

Apply in One Click

Requirements

• Kotlin 1.7.20 • GraphQL (it would be nice if you were familiar with this but it’s not a deal breaker) • React & React Native, TypeScript, MobX, Redux, Stylus and SASS • We build our Kotlin projects using Gradle and GitHub Actions, deploying to production as soon as we finish a feature • We use JUnit Jupiter, Kotest and TestContainers for automated testing • Pragmatism: You understand the difference between partnering with Engineering and security being a blocker of progress. • Communication: You can translate a complex vulnerability into a business risk for a Product Manager and a technical fix for an Engineer. • AppSec Subject Matter Expertise: You have a strong understanding of critical security risks in applications, are able to identify them in code, and provide recommendations of how to remediate. • Cloud Native: Strong experience securing AWS/GCP environments and containerised workloads. • AI ready: You understand the unique risks of AI and have experience securing AI-driven workflows. • LIFE AT LENDABLE

Responsibilities

• Secure the Pipeline: Integrate and automate SAST, DAST, and SCA tooling directly into our CI/CD pipelines to catch vulnerabilities before they reach production. • Harden the Product: Act as a Subject Matter Expert (SME) assisting engineers with the remediation of security vulnerabilities and bugs. • Safeguard AI: Design and implement security guardrails for AI-assisted development and LLM integrations, ensuring data privacy and preventing prompt injection or model leakage. • Threat Modelling: Partner with Product and Engineering teams to conduct threat modelling sessions for new features before they are built. • Security Architecture: Act as a consultant for infrastructure and application design, ensuring our AWS/GCP Kubernetes environments remain hardened. • Security Culture: Cultivate a Secure Development guild to level up our developers' secure coding skills.

Benefits

• What is your notice period? • Yes but I may require flexibility • Yes - Lendable loan • Yes - Zable credit card • Yes - Autolend loan • Recruiting Privacy Policy • Lendable may use Artificial Intelligence with this application. Learn more.