Information Security Engineer (AppSec Mobile)

Office: Krakow · London · Silesia
Remote: Poland · Portugal · Spain · UK

About Revolut

People deserve more from their money. More visibility, more control, more freedom. And since 2015, Revolut has been on a mission to deliver just that. With an arsenal of awesome products that span spending, saving, travel, transfers, investing, exchanging and more, our super app has helped 35+ million customers get more from their money. And we’re not done yet.

As we continue our lightning-fast growth,‌ two things are essential to continuing our success: our people and our culture. We’ve been officially certified as a Great Place to Work™ in recognition of our outstanding employee experience! So far, we have 8,000+ people working around the world, from our great offices or remotely, on our mission. And we’re looking for more. We want brilliant people that love building great products, love redefining success, and love turning the complexity of a chaotic world into the simplicity of a beautiful solution.

About the role

Our Technology team isn’t just one of the best in the industry, it’s one of the best in the world. And we’re proud of it. It’s our driving force; our engine 🚀 From building a new banking backend to creating an award-winning app, there’s nothing (and we mean nothing) our tech team can’t do.

Our Technology team isn’t here to fix legacy systems – it’s here to build world-class financial products from the ground up. Products that will be used by millions of people around the world (35+ million people, not that we’re counting) 🌎

Do you have a weird thing for bugs? No, not insects – the computer ones 🖥

If so, you’re the one for us! We’re looking for an Application Security Engineer (Mobile) to join our Information Security team.

But it’s not that easy – remember, we Never Settle 💪

You’ll need to show your passion with bug bounty findings, community talks, certifications, and blog posts on your interest.

If this is ‘so you’, you know where to find us 👀

What you’ll be doing

Providing knowledge, experience, and support across all our security teams and wider Technology and Business teams, as well as associated initiatives
Conducting thorough security assessments of mobile applications, identifying vulnerabilities and potential attack vectors
Leading efforts to implement and enhance security controls in mobile applications
Collaborating closely with the development team to ensure security is integrated into the SDLC (Secure Development Lifecycle)
Researching and staying up-to-date with the latest mobile security threats, trends, and best practices
Developing and delivering security training and awareness programs for the development team
Acting as a subject matter expert on mobile security, providing guidance and recommendations to stakeholders
Innovating and building tools and solutions to add to our arsenal of security monitoring and testing procedures

What you’ll need

5+ years of hands-on experience in mobile security, with a proven track record of identifying and mitigating security vulnerabilities
Extensive experience in mobile application development, with proficiency in Java, Kotlin, and Swift
A strong understanding of security protocols, encryption, and authentication mechanisms
Knowledge of relevant security frameworks, such as OWASP MASVS
Expertise implementing and bypassing controls like certificate pinning, facial recognition, and biometric authentication controls
Experience with secure coding practices and familiarity with industry standards (e.g., ISO 27001, NIST)
The ability to explain complex things in an easy way
An understanding of DevSecOps

Refer to our Data Privacy Statement for Candidates for details on our data handling practices during your application.

Diversity & Inclusivity:

Building a global financial super app isn’t enough. Our Revoluters are a priority, and that’s why in 2021 we launched our inaugural D&I Framework, designed to help us thrive and grow everyday. We're not just doing this because it's the right thing to do. We’re doing it because we know that seeking out diverse talent and creating an inclusive workplace is the way to create exceptional, innovative products and services for our customers. That’s why we encourage applications from people with diverse backgrounds and experiences to join this multicultural, hard-working team.