Information Security Engineer

@ Revolut

About Revolut

People deserve more from their money. More visibility, control, and freedom. Since 2015, Revolut has been on a mission to deliver innovative financial products to over 65 million customers worldwide.

Recognized as a Great Place to Work™, Revolut employs over 10,000 people globally through both office and remote work, and is continually growing with a strong focus on brilliant talent and a vibrant culture.

About The Role

The Information Security Engineer at Revolut is tasked with ensuring that our software and systems are safe from threats. This role involves designing, testing, monitoring, and protecting our applications and infrastructure while integrating security throughout the software development lifecycle.

What You'll Be Doing

• Perform security assessments on product designs, mobile apps, web applications, and APIs.
• Participate in Red Team missions and threat-led testing scenarios.
• Conduct penetration testing across applications, infrastructure, and APIs using both manual and automated tools.
• Manage and evolve the private bug bounty programme and collaborate with researchers.
• Partner with engineering and DevOps teams to embed security and enforce best practices in cloud environments (GCP and AWS).
• Develop internal AppSec standards aligned with OWASP, NIST, and industry benchmarks.
• Continuously research emerging threats and new security technologies.
• Contribute to internal security training sessions and mentor junior team members.

What You'll Need

• 3+ years of experience in application security, penetration testing, or a related field.
• Solid understanding of web, mobile, and API vulnerabilities and remediation strategies.
• Experience with code and design reviews, and threat modelling.
• Familiarity with DevSecOps practices and integrating security tools in CI/CD pipelines.
• Working knowledge of authentication, session management, and cryptographic practices.
• Proficiency with security tools such as Burp Suite, MobSF, Frida, and custom scripts.
• Basic cloud security principles and experience in GCP or AWS environments.
• Excellent communication skills for effective collaboration with Engineering, Product, and DevOps teams.
• A proactive mindset with the ability to work independently in a fast-paced environment.

Nice to Have

• Experience in Red Team exercises, bug bounty programme management, or open-source security contributions.

Key skills/competency

• Application Security
• Penetration Testing
• Threat Modelling
• Cloud Security
• DevSecOps
• Bug Bounty
• OWASP
• Vulnerability Assessment
• Red Teaming
• Security Tools