Product security engineer in payments

We’re reinventing payments. Check below to see if you have what is needed for this opportunity, and if so, make an application asap. In less than four years, Dojo disrupted the market to become the largest and most loved acquirer in the UK. Our payments infrastructure, purpose-built for in-person commerce, is game changing.Now, over 150,000 customers across four countries choose to transact billions with us every year. But we’re just getting started.Our people are the driving force behind our success. They are our greatest investment and our ultimate competitive advantage. We hire exceptional people and give them the autonomy, trust, and ownership to thrive.

• Collaborate closely with software engineers to integrate and enhance security practices throughout the product lifecycle.
• Establish defence-in-depth security requirements that align seamlessly with our technology strategy and business objectives.
• Conduct architecture reviews and threat modelling across cloud (GCP and AWS) and containerised environments.
• Risk-assess and prioritise findings from reviews, penetration testing, and AppSec/CSPM tooling, delivering actionable remediation guidance.

• Proven experience in Cyber Security, Application Security, or Secure Software Development.
• Strong understanding of the Secure Development Lifecycle (SDLC), DevSecOps best practices, and CI/CD security tooling.
• Demonstrated experience conducting threat modelling, security architecture reviews, and risk assessments.
• Familiarity with cloud security (GCP/AWS), Kubernetes environments, and penetration testing or vulnerability management.
• A pragmatic, collaborative mindset with the ability to partner effectively with engineering teams and adapt to a fast-growing scaleup environment.

• This means working from the office 4+ days per week.