Application Security Engineer

About the Role

As our Cyber Security Engineer, you will be the bridge between Security and Engineering. You aren’t here to block deployments; you’re here to ensure our code is resilient by design and to empower our developers to ship fast without breaking the trust of our customers or regulators.

Tech Stack

Backend

• Kotlin 1.7.20
• AWS
• GraphQL (knowledge is nice but not required)
• Postgres
• RabbitMQ
• Docker
• Kubernetes

Frontend

• React & React Native, TypeScript, MobX, Redux, Stylus and SASS

Other

• Gradle & GitHub Actions for CI/CD
• JUnit Jupiter, Kotest and TestContainers for automated testing

What You’ll Be Doing

• Secure the Pipeline: Integrate and automate SAST, DAST, and SCA tooling directly into our CI/CD pipelines to catch vulnerabilities before they reach production.
• Harden the Product: Act as a Subject Matter Expert (SME) assisting engineers with the remediation of security vulnerabilities and bugs.
• Safeguard AI: Design and implement security guardrails for AI-assisted development and LLM integrations, ensuring data privacy and preventing prompt injection or model leakage.
• Threat Modelling: Partner with Product and Engineering teams to conduct threat modelling sessions for new features before they are built.
• Security Architecture: Act as a consultant for infrastructure and application design, ensuring our AWS/GCP Kubernetes environments remain hardened.
• Security Culture: Cultivate a Secure Development guild to level up our developers’ secure coding skills.

What We’re Looking For

• Pragmatism: You understand the difference between partnering with Engineering and security being a blocker of progress.
• Communication: You can translate a complex vulnerability into a business risk for a Product Manager and a technical fix for an Engineer.
• AppSec Subject Matter Expertise: You have a strong understanding of critical security risks in applications, can identify them in code, and provide remediation recommendations.
• Cloud Native: Strong experience securing AWS/GCP environments and containerised workloads.
• AI Ready: You understand the unique risks of AI and have experience securing AI-driven workflows.

Interview Process

• Intro call with Talent Team
• Hiring Manager Call
• Take Home Task
• Final rounds
  • Tech Interview
  • Culture Interview

Life at Lendable

• The opportunity to scale up one of the world’s most successful fintech companies.
• Best-in-class compensation, including equity.
• You can work from home every Monday and Friday if you wish; on the other days, those based in the UK meet in our Shoreditch office in London.
• Enjoy a fully stocked kitchen with everything you need for breakfast, lunch, snacks and drinks every Tuesday‑Thursday.
• We care for our Lendies’ well‑being physically and mentally, offering private health insurance coverage.
• We’re an equal‑opportunity employer and are looking to make Lendable the most inclusive and open workspace in London.

We’re an equal‑opportunity employer and are looking to make Lendable the most inclusive and open workspace in London.

#J-18808-Ljbffr…