Application Security Specialist

Job description

Company Description We’re Checkout.com . You might not know our name, but companies like eBay, Spotify, Klarna, Uber, and Sony do, because we’re behind many of the digital experiences you use every day. We are where the world checks out, enabling over 10 billion transactions yearly for more than one billion global shoppers. Whether you want to book a holiday, order food, renew a subscription, or check out online, there’s a good chance our tech powers the payments behind the scenes. Our platform helps the most ambitious businesses deliver effortless digital experiences, at scale. If you want to do career-defining work, you’ve come to the right place. We move fast, think globally, and believe great teams are built by hiring exceptional people with conviction, curiosity, and the desire to make an impact. With 20 offices across six continents and London as our HQ, we’re shaping the future of fintech – and we’re just getting started. Role Overview As a Junior Application Security Analyst in the Information Security team, you will help secure Checkout.com ’s software applications throughout the Secure Software Development Lifecycle (SSDLC). You will work closely with developers and product teams to integrate security early in the development process, identify and oversee the remediation of vulnerabilities, and ensure adherence to secure coding practices and application security standards. This role focuses on practical, hands-on security support while also growing your expertise in application security. Key Responsibilities SSDLC & Secure Coding Assist in integrating security controls into the SSDLC. Support the creation and maintenance of secure coding guidelines (e.g., OWASP Top 10, CERT Secure Coding Standards). Application Security Testing Run a Static Application Security Testing (SAST) and Software Composition Analysis (SCA) scans. Conduct API security testing. Support CI/CD pipelines to keep secure and effective integration. Threat Modeling & Application Security Analysis Participate in threat modeling sessions. Document identified threats, assess risks and provide mitigation recommendations. Assist in code and system reviews to analyse security in company’s products. Vulnerability Management Triage and prioritise vulnerabilities from automated scans. Track, verify and ensure security flaws remediation. Assist to automate an AppSec pipelines Collaboration…