Information Security Engineer (AppSec)

About Revolut

About the role

What you'll be doing

• Assess product designs, mobile apps for iOS and Android, web applications, and APIs.
• Participate in Red Team missions and threat-led tests to simulate attackers and validate detection and response.
• Lead penetration testing across applications, infrastructure, and APIs using manual techniques and automated tools.
• Manage the private bug bounty programme, validate submissions, work with researchers, and ensure timely resolution of valid findings.
• Identify cloud misconfigurations and work with DevOps on security practices across GCP and AWS.
• Work with engineering teams to embed security into the development lifecycle and advise on secure architecture and threat modelling.
• Develop and enforce AppSec standards and policies aligned with OWASP, NIST, and industry benchmarks.
• Research emerging threats, tools, and technologies; contribute to training and knowledge sharing, and mentor junior team members.

What you'll need

• At least 3 years of hands-on experience in application security, penetration testing, or related security engineering.
• Solid understanding of web, mobile, and API vulnerabilities, including OWASP Top 10 and CWE, and how to remediate them.
• Experience with code reviews, design reviews, and threat modelling for modern application architectures.
• Familiarity with DevSecOps and security tooling in CI/CD pipelines.
• Working knowledge of authentication, authorisation, session management, and cryptographic best practices.
• Proficiency with security tools such as Burp Suite, MobSF, Frida, or custom scripts for dynamic and static analysis.
• Basic cloud security understanding and experience with GCP or AWS.
• Strong communication and collaboration skills; able to work independently and as part of a team.
• Preferred: Red Team exercise experience, bug bounty programme management, or contributions to open-source security tools or research.

Compensation range

• The description lists gross monthly compensation of PLN 18,200–22,500 for Krakow and Poland; compensation for other locations is discussed during interviews.
• Final compensation depends on qualifications, skills, and previous experience.