Application Security Engineer, Lendable
+ Equity
More information about location
3 days a week in office
Fintech Unicorn - Lending Platform
Be an early applicant
Fintech Unicorn - Lending Platform
201-500 employees
Be an early applicant
+ Equity
More information about location
3 days a week in office
201-500 employees
Company mission
To make consumer finance amazing: faster, cheaper and friendlier.
Role
Who you are
- We’re working in a fast paced environment and we would like to hear from you if you are someone who can work independently
- 3+ years of experience in Application Security in an equivalent role
- You have worked with application development teams on improving their software development lifecycle
- You have a proven and strong depth of expertise in cyber and information security. Ideally with hands-on experience in web and mobile security for critical 24/7 applications
- You built dashboards to communicate the state of security and you were involved in reporting
- You have knowledge of secure coding and can guide others how to avoid writing vulnerable code. Leading in spotting security issues during peer review of PRs
- You have basic software engineering knowledge, enough to work on InfoSec tooling from time to time and to understand the challenges software engineers face
- You have a solid understanding of common operating systems, especially Linux
- You have an equally solid understanding of networks, protocols and data formats, the sort often exposed by applications and thus needing enough knowledge to meaningfully assess
- You have a solid understanding of authentication and authorization protocols and services
- You have a wide knowledge of security practices, technologies, and conventions
- You have a strong desire to learn, improve and challenge the status quo. Our engineering teams push their own technological initiatives with emerging technology stacks, and you will be helping them to improve their security practices
What the job involves
- We’re looking for a cyber security analyst working under the supervision of the Head of Information Security, guiding the Engineering and Product Teams to improve their products from a security perspective
- The Information Security team supports both our internal departments and our external stakeholders. Your role will therefore cover Application Security right across the business
- Your main focus will be to help and guide the engineering teams to enhance their Secure Software Development Lifecycle (OWASP best practices, secure by design, security testing, vulnerability management, threat modelling, security tooling)
- You’ll be helping with audits (specifically ISO/IEC 27001 certification and SOC2), risk management, security Incident management; but your main focus will be to help and guide the engineerings teams to enhance the Secure Software Development Lifecycle (OWASP best practices, security by design, security testing, vulnerability management)
- There’s a lot to do, you’ll be given the chance to put your mark on Lendable’s Secure Software Development Lifecycle, to formalise the product security review process while drawing from our past experience
- You’ll be given the opportunity to shape our security tooling and extend our development portal to integrate all security related data into a single platform
- Advise the delivery and operations teams on security best practices (e.g., NSCS, NIST, OWASP, etc.)
- Improving the definition of non-functional Security requirements and championing these in the Engineering Teams
- Guiding the Security Assessment of internally develop applications, helping the teams updating risk reports, recommending remediating/mitigating controls, advising and working with the engineering teams to implement solutions
- Providing Application Security Consultancy to engineering teams: assisting them to analyse the business impact of security risks to their applications, providing security input to requirements specification, architecture and design
- Championing the application security life cycle process, policy, guidelines and standards and providing security implementation guidance
- Assisting teams to design and implement Authentication, Role-based Access Control, Data Encryption, Digital Signatures, Auditing/Logging, Secure Coding and Regulatory Compliance
- Working with the product teams to gain better understanding of their risk profile using state of the art tools; Integrating security tooling into the SDLC to help the engineering teams to improve their security profile
- Development of Threat Modeling and Risk Assessment frameworks
- Assure operation of a toolchain running source code analysis and vulnerability scanning
- Automating repeating tasks to drive efficiency within the security team
- Supporting the Security Operations Center while investigating and helping with resolutions in the remediation phase
Application process
- A quick phone call with one of the team
- A short technical exercise to complete in your own time
- Onsite or Video Interview
- Discuss the exercise you completed
- Discuss your past experience
- Explore how your career aspirations align with the responsibilities and opportunities of this position
- Meet the team you’ll work with daily
Salary benchmarks
Our take
Lendable competes with banks, other marketplace lenders, and consumer finance companies to provide loans to consumers, small businesses, and property developers. Last year the UK marketplace lenders loaned £7.3bn in total.
Lendable believes it can win in this crowded field due to its market-best customer service and its strong financials. Unlike Zopa, RateSetter, or Lending Works, their funding comes from institutional investors.
It originates and services the loans on behalf of institutional investors, but does not hold them on its own balance sheet.
Growing insolvencies will worry all marketplace lending platforms, but Lendable looks well placed to weather any credit storm given their substantial debt financing.
Steph
Company Specialist at Welcome to the Jungle
Insights
Some candidates hear
back within 2 weeks
40% female employees
72% employee growth in 12 months
Company
Employee endorsements
Challenging work
"At Lendable I'm in a position to make decisions and engineer solutions on a product that's worth billions and growing all of the time. This brings..."
Funding (last 2 of 3 rounds)
Mar 2022
$265.4m
GROWTH EQUITY VC
Sep 2017
$6.5m
SERIES A
Total funding: $275.1m
Company benefits
- Cycle to Work scheme
- Onsite Yoga
- Lunch cooked by onsite chefs 3 times a week
- 25 days holiday (excl. bank holidays)
- Work from home opportunities on Monday and Friday
- Private Health Insurance (inclusive of dental and pre-existing conditions)
- Share Options for all Employees
- Regular team and company wide socials
- Pension
Company HQ
London, UK
Articles
Leadership
Martin Kissinger
(Co-Founder & CEO)Studied Economics as an undergraduate at LSE before doing an MPhil at Oxford University. Worked as an Entrepreneur in Residence at Rocket in Berlin.
Paul Pamment
(Co-Founder)Studied Mathematics at Oxford University before taking up technical roles at a handful of startups.
Jakob Schwarz
(Co-Founder)Worked as an Analyst at Goldman Sachs and then BCG before founding Lendable.
Victoria van Lennep
(Co-Founder)Worked as the Deputy Editor at the Economist before joining Martin Kissinger to co-found Lendable!
Share this job
View 21 more jobs at Lendable