Product security engineer in payments

Описание

We’re reinventing payments. In less than four years, Dojo disrupted the market to become the largest and most loved acquirer in the UK. Our payments infrastructure, purpose-built for in-person commerce, is game changing.Now, over 150,000 customers across four countries choose to transact billions with us every year. But we’re just getting started. Our people are the driving force behind our success. They are our greatest investment and our ultimate competitive advantage. We hire exceptional people and give them the autonomy, trust, and ownership to thrive.

Задачи

Collaborate closely with software engineers to integrate and enhance security practices throughout the product lifecycle. Establish defence-in-depth security requirements that align seamlessly with our technology strategy and business objectives. Conduct architecture reviews and threat modelling across cloud (GCP and AWS) and containerised environments. Risk-assess and prioritise findings from reviews, penetration testing, and AppSec/CSPM tooling, delivering actionable remediation guidance.

Требования

Proven experience in Cyber Security, Application Security, or Secure Software Development. Strong understanding of the Secure Development Lifecycle (SDLC), DevSecOps best practices, and CI/CD security tooling. Demonstrated experience conducting threat modelling, security architecture reviews, and risk assessments. Familiarity with cloud security (GCP/AWS), Kubernetes environments, and penetration testing or vulnerability management. A pragmatic, collaborative mindset with the ability to partner effectively with engineering teams and adapt to a fast-growing scaleup environment.

Условия

This means working from the office 4+ days per week.

#J-18808-Ljbffr