AppSec Jobs

Revolut Security Team

Open security roles at Revolut, and what we know about the team behind them.

financial services · 11000 employees · 3 open roles. Updated October 16, 2026.

Open roles (3)

Revolut

Graduate Programme 2027: Information Security Engineer (Appsec)

RemoteSecurity Intel
Portugalfinancial servicesPosted 1 month agoVerified 4d agoKrakow: PLN16,600 - PLN16,600 gross monthly; Poland: PLN16,600 - PLN16,600 gross monthly; Other locations: Compensation will be discussed during the interview process

“Revolut's AppSec philosophy is "developer-first" and explicitly "shift-left," prioritizing low-noise automation and...”

StackSCAGitLabBitbucket
View Job

Revolut

Internship Programme 2027: Information Security Engineer (Appsec)

HybridSecurity Intel
United Kingdomfinancial servicesPosted 1 month agoVerified 4d agoKrakow: PLN9,100 - PLN9,100 gross monthly; Poland: PLN9,100 - PLN9,100 gross monthly; Other locations: Compensation will be discussed during the interview process

“Revolut's AppSec philosophy is "developer-first" and explicitly "shift-left," prioritizing low-noise automation and...”

StackSCAGitLabBitbucket
View Job

Revolut

Internship Programme 2027: Information Security Engineer (Appsec)

HybridSecurity Intel
Porto, Porto, Portugalfinancial servicesPosted 3 months agoVerified 2d agoKrakow: PLN9,100 - PLN9,100 gross monthly; Poland: PLN9,100 - PLN9,100 gross monthly; Other locations: Compensation will be discussed during the interview process. Final compensation will be determined based on the candidate's qualifications, skills, and previous experience

“Revolut's AppSec philosophy is "developer-first" and explicitly "shift-left," prioritizing low-noise automation and...”

StackSCAGitLabBitbucket
View Job

Security at Revolut

Compiled from public job postings, careers pages, and company materials. Data may not reflect current state — verify during interviews.

3 Intel Signals

How they approach application security

  • Revolut's AppSec philosophy is "developer-first" and explicitly "shift-left," prioritizing low-noise automation and auto-remediation over manual vulnerability management.
  • Risk is addressed through "risk-based change review processes" embedded in product releases, with AppSec engaged "within the Software Development Life Cycle.".

The team

  • **Org Structure & Reporting Line:** AppSec sits within the **Information Security** function. **Key Public-Facing Leaders:** 1. **Arsalan Ghazi** – Head of AppSec, Revolut (named in Aikido Blog, Revolut Tech Medium) 2. **Pedro Moura** – AppSec Engineer (co-author of Security Drone and DARC) 3. **Krzysztof Pranczk** – Engineer (author on CI/CD security assurance) 4. **Victoria Fox** – Global Head of Security, Safety, Facilities and Real Estate (broader remit) Named individuals suggest a small-to-mid team, but no headcount figure is published. **Active AppSec Job Postings (as_of:):** - **Count:** 4 postings (Lead AppSec Engineer – London.
  • AppSec Engineer – multi-location.
  • Info Sec Grad Ops) - **Common Skill/Tool Patterns:** Java, Swift, Python, Scala.
  • Python/bash automation.
  • SAST/DAST skills.
  • "An understanding of DevSecOps".
  • Source code reviews.
  • Web/mobile app security testing.
  • Managing external testing/bug bounty.

What they're working on

**Documented Initiatives:** - SCA rollout (Aikido Security, Nov 2025) – vendor-confirmed - Shift-left CI/CD security tooling (Security Drone, DARC) – - Bug bounty / VDP via Intigriti - Responsible disclosure program (revolut.com/responsible-disclosure-program/) - Active hiring: Lead AppSec Engineer, AppSec Engineer, AppSec Intern, Info Sec Grad Ops **Security Champions Program:** No Evidence Found in public sources. **Not Publicly Documented:** Security Champions program, formal SLAs/MTTR, named SDLC ceremonies, threat-modeling cadence, SAST/DAST/Secrets/CSPM/GenAI tool selections