Revolut

Internship Programme 2027: Information Security Engineer (Appsec)

Hybrid

United KingdomPosted 4 days agoKrakow: PLN9,100 - PLN9,100 gross monthly; Poland: PLN9,100 - PLN9,100 gross monthly; Other locations: Compensation will be discussed during the interview processWebsite

Apply on LinkedIn →

At a Glance

CS/Security DegreeAdvanced Degree

About This Role

Our Technology team builds the systems and experiences that keep Revolut moving. From the infrastructure behind our innovative app to the features used by millions of people around the world, they bring sharp thinking, speed, and a focus on meaningful impact to everything they do. We're looking for Application Security Engineering Interns to design and test applications, run scans to identify risks, and contribute to protecting our systems. You'll help keep our software safe from threats and vulnerabilities. The Internship Programme is built for ambitious students who want to make their summer count. Over 8–10 paid weeks, you'll work on real projects, solve meaningful challenges, and grow your skills alongside industry experts. Top performers may be offered a place on our Graduate Programme the following year. The programme is open to international applicants ready to relocate to one of our tech hubs in Poland, Portugal, the UAE, or the UK. We'll support you with visa assistance, travel costs, and accommodation (conditions apply). You'll be expected to spend around 3 days per week in the office.

Responsibilities

Running SAST and DAST security scans to identify vulnerabilities and common OWASP issues
Reviewing system configurations with guidance and checklists
Documenting findings from security tests and sharing them with senior engineers
Researching emerging security threats and contributing to knowledge bases
Participating in security training sessions and team discussions
Supporting developers by flagging security issues and suggesting improvements
Learning from senior engineers and receiving feedback on your work

Requirements

To be in your penultimate year of a bachelor's or master's degree in computer science, maths, physics, or a related field (graduating in 2028)
On track for a 2:1 or higher (or equivalent grade)
A portfolio of coding side projects or open-source contributions
A proactive, results-driven mindset
Fluency in English
Great communication, organisational, and problem-solving skills
Comfortable working in a fast-paced, diverse team environment
Full-time availability for Summer 2027
The ability to travel to a Revolut office in your country of employment
A willingness to attend the office at least 3 days per week (hybrid role)

Benefits & Perks

Financial benefits that show we value your work

Flexibility to work from home, the office, or abroad

A Revolut Metal subscription loaded with perks

Exciting events year-round so you can get to know your team

About Revolut

Revolut is a London-based neobank and financial superapp founded in 2015 by Nikolay Storonsky and Vlad Yatsenko. The company aims to simplify money management by providing faster and more affordable alternatives to traditional banking services, including foreign exchange and transfers. With a mission to eliminate middlemen and empower users globally, Revolut offers a seamless mobile app that supports multi-currency transactions and innovative financial tools. Since its launch, Revolut has rapidly expanded its user base, reaching over 50 million customers by 2024, including more than 30 million personal users and over 500,000 business users. The app features a comprehensive suite of financial products, such as multi-currency accounts, international money transfers, spending analytics, and investment options. Revolut Business provides corporate banking solutions, expense management, and payroll tools, catering to the needs of businesses worldwide. The company operates in over 35 countries and processes more than $1 trillion in transactions annually, positioning itself as a leader in the digital finance space.

Industry

financial services

Employees

11,000

1658 engineers

Revenue

$4.0B

Website

Visit →

Security at Revolut

Compiled from public job postings, careers pages, and company materials. Data may not reflect current state — verify during interviews.

3 Intel Signals

Security Philosophy

Revolut's AppSec philosophy is "developer-first" and explicitly "shift-left," prioritizing low-noise automation and auto-remediation over manual vulnerability management.
Risk is addressed through "risk-based change review processes" embedded in product releases, with AppSec engaged "within the Software Development Life Cycle.".

Security Team

**Org Structure & Reporting Line:** AppSec sits within the **Information Security** function. Reporting chain above Information Security: Information not publicly available. **Key Public-Facing Leaders:** 1. **Arsalan Ghazi** – Head of AppSec, Revolut (named in Aikido Blog, Revolut Tech Medium) 2. **Pedro Moura** – AppSec Engineer (co-author of Security Drone and DARC) 3. **Krzysztof Pranczk** – Engineer (author on CI/CD security assurance) 4. **Victoria Fox** – Global Head of Security, Safety, Facilities and Real Estate (broader remit) **Team Size Estimate:** Information not publicly available. Named individuals suggest a small-to-mid team, but no headcount figure is published. **Active AppSec Job Postings (as_of:):** - **Count:** 4 postings (Lead AppSec Engineer – London; AppSec Engineer – multi-location; AppSec Intern; Info Sec Grad Ops) - **Common Skill/Tool Patterns:** Java, Swift, Python, Scala; Python/bash automation; SAST/DAST skills; "An understanding of DevSecOps"; source code reviews; web/mobile app security testing; managing external testing/bug bounty

Key Initiatives

**Documented Initiatives:** - SCA rollout (Aikido Security, Nov 2025) – vendor-confirmed - Shift-left CI/CD security tooling (Security Drone, DARC) – - Bug bounty / VDP via Intigriti - Responsible disclosure program (revolut.com/responsible-disclosure-program/) - Active hiring: Lead AppSec Engineer, AppSec Engineer, AppSec Intern, Info Sec Grad Ops **Security Champions Program:** No Evidence Found in public sources. **Not Publicly Documented:** Security Champions program, formal SLAs/MTTR, named SDLC ceremonies, threat-modeling cadence, SAST/DAST/Secrets/CSPM/GenAI tool selections.

Preparing for an AppSec interview?

Get the weekly briefing 2,000+ security pros trust.

Interested in this role?

Apply on LinkedIn