About
We're reinventing payments. In less than four years, Dojo disrupted the market to become the largest and most loved acquirer in the UK. Our payments infrastructure, purpose-built for in-person commerce, is game changing. Now, over 150,000 customers across four countries choose to transact billions with us every year.
Responsibilities
•Collaborate closely with software engineers to integrate and enhance security practices throughout the product lifecycle.
•Establish defence-in-depth security requirements that align seamlessly with our technology strategy and business objectives.
•Conduct architecture reviews and threat modelling across cloud (GCP and AWS) and containerised environments.
•Risk-assess and prioritise findings from reviews, penetration testing, and AppSec/CSPM tooling, delivering actionable remediation guidance.
Requirements
•Proven experience in Cyber Security, Application Security, or Secure Software Development.
•Strong understanding of the Secure Development Lifecycle (SDLC), DevSecOps best practices, and CI/CD security tooling.
•Demonstrated experience conducting threat modelling, security architecture reviews, and risk assessments.
•Familiarity with cloud security (GCP/AWS), Kubernetes environments, and penetration testing or vulnerability management.
•A pragmatic, collaborative mindset with the ability to partner effectively with engineering teams and adapt to a fast-growing scaleup environment.
Conditions
•Working from the office 4+ days per week.
