Secure NestJS and TypeScript applications and identity integrations by finding and mitigating vulnerabilities, reviewing OAuth/OIDC flows, and helping engineering teams build secure-by-default software.
Junior Security Engineer
📜 Description
- Review platform and product code, identify security issues, and guide engineers toward secure solutions.
- Build internal tools, libraries, and automation for security testing and enforcement.
- Continuously test internal and external applications for vulnerabilities.
- Support third-party application security reviews and penetration tests.
- Educate product and engineering teams on secure coding and design practices.
- Track emerging threats and assess their relevance to the platform.
🛠️ Requirements
- An adversary-first mindset - you instinctively ask "how would I break this?"
- Familiarity with common attacker tools and techniques, and how insecure development practices get exploited (e.g. OWASP Top 10)
- Programming experience in at least one modern language (Go, Python, or TypeScript).
- Clear communication skills - you can explain security concepts to technical and non-technical audiences alike.
- Self-motivation and a genuine drive to keep learning
- Exposure to blockchain technologies and cryptocurrency systems, and their security implications
- Experience with security tooling, CTFs, bug bounties, or open-source security contributions
- Prior internship or work experience in a fast-moving startup environment
✨ Benefits
- We recently raised a $39M Series A led by Accel, positioning us for major growth — a rare chance to join while things are still moving fast
- We're building a fully-licensed programmable bank, rearchitecting how money moves between businesses, across borders
- We ship fast, think deeply, and expect high ownership — your work will hit production quickly across several parts of the business
- You'll work alongside engineers from Monzo, Atom Bank, Blockdaemon, GXS, and Grab
Full job description
About Pave Bank
Pave Bank is the world’s first programmable business bank. Built by the founders behind Monzo and BigPay, we’re redefining global business banking by combining programmable financial infrastructure with world-class client experiences.
About the Role
We’re looking for a Junior Security Engineer who is independent, curious, and has an adversary first mindset - someone who thinks like an attacker to keep our platform secure.
You'll be a critical guardian of Pave Bank: identifying weaknesses, closing loopholes, and empowering our Product and Engineering teams to ship quickly without compromising security.
You'll get hands-on exposure across the full security lifecycle - from code review to penetration testing - with mentorship from experienced engineers.
What You'll Do
Review platform and product code to identify security issues and guide engineers toward secure solutions
Build internal tools, libraries, and automation to improve security testing and enforcement
Continuously test internal and external applications for vulnerabilities
Support third-party application security reviews and penetration tests
Help educate engineering and product teams on secure coding and design practices
Stay current on emerging threats and attack techniques, and assess how they apply to our systems
What We're Looking For
Must have
An adversary-first mindset - you instinctively ask "how would I break this?"
Familiarity with common attacker tools and techniques, and how insecure development practices get exploited (e.g. OWASP Top 10)
Programming experience in at least one modern language (Go, Python, or TypeScript).
Clear communication skills - you can explain security concepts to technical and non-technical audiences alike.
Self-motivation and a genuine drive to keep learning
Nice to have:
Exposure to blockchain technologies and cryptocurrency systems, and their security implications
Experience with security tooling, CTFs, bug bounties, or open-source security contributions
Prior internship or work experience in a fast-moving startup environment
Why Join Us
We recently raised a $39M Series A led by Accel, positioning us for major growth — a rare chance to join while things are still moving fast
We're building a fully-licensed programmable bank, rearchitecting how money moves between businesses, across borders, and between traditional and digital finance
We ship fast, think deeply, and expect high ownership — your work will hit production quickly across several parts of the business
You'll work alongside engineers from Monzo, Atom Bank, Blockdaemon, GXS, and Grab
Similar jobs
Search more Cybersecurity Engineer jobsDesign and mature security controls for AI systems across products and the enterprise, assess AI/ML threats, build defensive tooling, and help engineering teams integrate security throughout the AI lifecycle.
Administer and improve the vulnerability management program by scanning IT assets, prioritizing security risks, coordinating and validating remediation, managing patching, and reporting trends and risks to IT leadership.
Secure cloud and non-cloud systems through security operations, architecture reviews, risk assessments, and remediation, while collaborating across engineering, GRC, and third-party risk teams.
Secure cloud infrastructure and application platforms by designing and enforcing security controls, hardening infrastructure, and improving detection and incident response across engineering teams.
