> Markdown version of [/jobs/ext/4573728-application-security-analyst](https://www.wearedevelopers.com/jobs/ext/4573728-application-security-analyst). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Application Security Analyst

- **Company:** Checkout.com
- **Location:** United Kingdom
- **Experience:** Starter
- **Contract:** Permanent contract
- **Skills:** Kubernetes Security, JavaScript (Programming Language), Amazon Web Services, Software Applications, Microsoft Azure, Cloud Computing, Cyber Security, Computer Programming, Domain Name System (DNS), Github, Hypertext Transfer Protocols (HTTP), OSI Models, Python (Programming Language), Open Web Application Security, Secure Coding, Security Support Provider Interface, Software Engineering, Systems Integration, TCP/IP, Google Cloud, Software Security, Kubernetes, Devsecops, Docker, Static Application Security Testing, Golang, Dynamic Application Security Testing
- **Published:** November 5, 2026
- **Apply:** https://startup.jobs/application-security-specialist-checkout-com-10678004

## About the Role

* 1-3 years in application security, secure software development, or related IT/security role.
 * Understand basic network technologies and protocols (HTTP, TCP/IP, DNS and the OSI model).
 * Understanding of common software vulnerabilities and their mitigations.
 * Basic programming experience in a popular language (e.g., Python, JavaScript, Golang).
 * Understanding of CI/CD pipelines and DevSecOps principles.
 * Basic understanding of cloud technologies (AWS, GCP or Azure) and GitHub security features.
 * Strong attention to detail in documentation and assessments.

Preferred

 * Familiarity with SAST/DAST/SCA tools and API security testing platforms.
 * Exposure to cloud-native application security (AWS, Azure, GCP).
 * Understanding of container security (Docker, Kubernetes).
 * Experience of participating in Capture The Flag (CTF) competitions., * Eager to learn and expand technical skills in application security.
 * Effective communicator with both technical and non-technical audiences.
 * Collaborative and proactive problem solver.
 * Ability to prioritise work.

## Description

As a Junior Application Security Analyst in the Information Security team, you will help secure Checkout.com's software applications throughout the Secure Software Development Lifecycle (SSDLC). You will work closely with developers and product teams to integrate security early in the development process, identify and oversee the remediation of vulnerabilities, and ensure adherence to secure coding practices and application security standards. This role focuses on practical, hands-on security support while also growing your expertise in application security., SSDLC & Secure Coding

 * Assist in integrating security controls into the SSDLC.
 * Support the creation and maintenance of secure coding guidelines (e.g., OWASP Top 10, CERT Secure Coding Standards).

Application Security Testing

 * Run a Static Application Security Testing (SAST) and Software Composition Analysis (SCA) scans.
 * Conduct API security testing.
 * Support CI/CD pipelines to keep secure and effective integration.

Threat Modeling & Application Security Analysis

 * Participate in threat modeling sessions.
 * Document identified threats, assess risks and provide mitigation recommendations.
 * Assist in code and system reviews to analyse security in company's products., * Collaborate with engineering teams to integrate security into product design and improve existing systems.
 * Help deliver training and awareness on SSDLC best practices and secure coding.
 * Contribute to security documentations.