At a Glance
- Tasks: Secure software applications and integrate security into the development process.
- Company: Join Checkout.com, powering payments for brands like eBay and Spotify.
- Benefits: Flexible hybrid working model, career growth opportunities, and a supportive team culture.
- Other info: Collaborative environment with a focus on learning and personal growth.
- Why this job: Make a real impact in fintech while developing your application security skills.
- Qualifications: 1-3 years in application security or related IT role; basic programming skills required.
The predicted salary is between 63000 - 77000 £ per year.
Company Description
We’re Checkout.com. You might not know our name, but companies like eBay, Spotify, Klarna, Uber, and Sony do, because we’re behind many of the digital experiences you use every day. We are where the world checks out, enabling over 10 billion transactions yearly for more than one billion global shoppers. Whether you want to book a holiday, order food, renew a subscription, or check out online, there’s a good chance our tech powers the payments behind the scenes. Our platform helps the most ambitious businesses deliver effortless digital experiences, at scale. If you want to do career-defining work, you’ve come to the right place. We move fast, think globally, and believe great teams are built by hiring exceptional people with conviction, curiosity, and the desire to make an impact. With 20 offices across six continents and London as our HQ, we’re shaping the future of fintech – and we’re just getting started.
Role Overview
As a Junior Application Security Analyst in the Information Security team, you will help secure Checkout.com’s software applications throughout the Secure Software Development Lifecycle (SSDLC). You will work closely with developers and product teams to integrate security early in the development process, identify and oversee the remediation of vulnerabilities, and ensure adherence to secure coding practices and application security standards. This role focuses on practical, hands-on security support while also growing your expertise in application security.
Key Responsibilities
- SSDLC & Secure Coding: Assist in integrating security controls into the SSDLC. Support the creation and maintenance of secure coding guidelines (e.g., OWASP Top 10, CERT Secure Coding Standards).
- Application Security Testing: Run a Static Application Security Testing (SAST) and Software Composition Analysis (SCA) scans. Conduct API security testing. Support CI/CD pipelines to keep secure and effective integration.
- Threat Modeling & Application Security Analysis: Participate in threat modeling sessions. Document identified threats, assess risks and provide mitigation recommendations. Assist in code and system reviews to analyse security in company’s products.
- Vulnerability Management: Triage and prioritise vulnerabilities from automated scans. Track, verify and ensure security flaws remediation. Assist to automate an AppSec pipelines.
- Collaboration & Awareness: Collaborate with engineering teams to integrate security into product design and improve existing systems. Help deliver training and awareness on SSDLC best practices and secure coding. Contribute to security documentations.
Required Skills & Experience
- 1–3 years in application security, secure software development, or related IT/security role.
- Understand basic network technologies and protocols (HTTP, TCP/IP, DNS and the OSI model).
- Understanding of common software vulnerabilities and their mitigations.
- Basic programming experience in a popular language (e.g., Python, JavaScript, Golang).
- Understanding of CI/CD pipelines and DevSecOps principles.
- Basic understanding of cloud technologies (AWS, GCP or Azure) and GitHub security features.
- Strong attention to detail in documentation and assessments.
Preferred
- Familiarity with SAST/DAST/SCA tools and API security testing platforms.
- Exposure to cloud-native application security (AWS, Azure, GCP).
- Understanding of container security (Docker, Kubernetes).
- Experience of participating in Capture The Flag (CTF) competitions.
Key Competencies
- Eager to learn and expand technical skills in application security.
- Effective communicator with both technical and non-technical audiences.
- Collaborative and proactive problem solver.
- Ability to prioritise work.
Additional Information
Bring all of you to work. We create the conditions for high performers to thrive, through real ownership, fewer blockers, and work that makes a difference from day one. Here, you’ll move fast, take on meaningful challenges, and be recognized for the impact you deliver. It’s a place where ambition gets met with opportunity, and where your growth is in your hands. We work as one team, and we back each other to succeed. So whatever your background or identity, if you’re ready to grow and make a difference, you’ll be right at home here. It’s important we set you up for success and make our process as accessible as possible. So let us know in your application, or tell your recruiter directly, if you need anything to make your experience or working environment more comfortable.
Life at Checkout.com
We understand that work is just one part of your life. Our hybrid working model offers flexibility, with three days per week in the office to support collaboration and connection.
Application Security Specialist Information security London employer: Checkout
Checkout.com is an exceptional employer that fosters a dynamic and collaborative work culture, where innovation and strategic thinking are highly valued. Located in a vibrant city, employees benefit from a supportive environment that encourages professional growth through continuous learning opportunities and cross-functional collaboration. With a focus on impactful initiatives, team members are empowered to make meaningful contributions that drive the company's success.
StudySmarter Expert Advice🤫
We think this is how you could land Application Security Specialist Information security London
✨Join Local Tech Meetups
Get out there and mingle with fellow developers by joining local tech meetups. It’s a fantastic way to meet people who might be working at Checkout or know someone who does. Plus, you can pick up some trendy tech skills and trends while you're at it!
✨Contribute to Open Source Projects
Show off your coding chops by jumping into open-source projects. Not only does this give you practical experience, but it also gets you noticed in the dev community. You'll create a killer portfolio that speaks volumes about your skills to Checkout.
✨Tap into Online Developer Communities
Don’t underestimate the power of online developer communities like GitHub, Stack Overflow, and even Reddit. Participate in discussions, share your projects, and build your visibility. We can often find opportunities through these channels that can lead to a full-time gig at companies like Checkout.
✨Explore Job Boards Specifically for Tech Roles
Keep your eyes peeled on job boards that focus on tech roles. Sites like TechCareers or Stack Overflow Jobs can often have listings for companies like Checkout that might not show up on broader job sites. Make it a habit to check these regularly, and don’t hesitate to apply directly through our website!
We think you need these skills to ace Application Security Specialist Information security London
Some tips for your application 🫡
Show off your coding skills:When applying for a software engineering role, it's super important to showcase your coding skills. Make sure your CV includes your tech stack, any relevant programming languages you’re comfortable with, and examples of projects you've worked on. If you have a GitHub profile, link it up! We love to see code in action.
Tailor your portfolio:For a full-time role, we’d expect to see some solid examples of your work in your portfolio. Make sure to include at least two or three projects that highlight your problem-solving skills and your ability to work with different technologies. Focus on the projects that are most relevant to the position at Checkout.
Craft a killer cover letter:Your cover letter is your chance to stand out—make it personal! Explain why you want to work at Checkout and how your skills align with the role. Show us your passion for software development. We dig enthusiastic candidates who understand the value of collaboration and continuous learning!
Be clear and concise:When it comes to writing your CV and cover letter, clarity is key. Avoid jargon that could confuse us and stick to simple, direct language. Highlight your achievements with quantifiable results where possible, and keep everything easy to read. A well-organised application goes a long way!
How to prepare for a job interview at Checkout
✨Brush Up on Your Coding Skills
For a full-time software engineering role, it's crucial that we stay sharp with our coding abilities. Expect technical questions that might involve solving problems on the spot or discussing algorithms. Practise on platforms like LeetCode or HackerRank to get comfortable with the types of questions that often come up.
✨Know Your Tools and Frameworks
Make sure we’re well-acquainted with the tools and technologies listed in the job description. Familiarise ourselves with any specific frameworks or programming languages mentioned. If Checkout uses React or Node.js, for instance, be ready to discuss how we’ve used them in previous projects or coursework.
✨Showcase Your Projects
Bring along a portfolio that highlights our best work. This could be code samples, GitHub repositories, or any side projects we’ve built. Make sure we can talk through our thought process for each project, especially the challenges we faced and how we solved them—this shows our problem-solving skills in action.
✨Prepare for Behavioural Questions
While technical skills are key, full-time positions also require cultural fit. Be ready to discuss our previous experiences and how we handle teamwork, conflict, and deadlines. Brush up on the STAR method—Situation, Task, Action, Result—to clearly articulate our past experiences when discussing how we've contributed to a team.
