We'd love to hear from you if you have... 🔍

• Significant experience identifying, assessing and mitigating security risks across application design, code and deployed products, including setting up and running application security vulnerability management processes and reporting
• Experience shaping and delivering a product or application security roadmap, with the confidence to influence engineering leaders and use metrics to demonstrate progress and risk reduction
• Experience securing mobile applications and APIs, including testing iOS and Android apps and applying secure approaches to authentication and authorisation, such as OAuth 2.0 and OpenID Connect
• Hands-on experience with security testing tools such as SAST, DAST and vulnerability scanning solutions, ideally including mobile app security testing and API security testing tools
• Practical experience with threat modelling and security reviews, as well as scoping and managing third-party penetration tests in partnership with engineering teams and architects
• A strong grasp of secure coding practices and experience embedding security into software development workflows, including implementing technical controls and driving automation within CI/CD pipelines, ideally across cloud-native, containerised and infrastructure as code (IaC) environments
• Familiarity with industry standards and frameworks such as OWASP (ideally including the Mobile Application Security Verification Standard and API Security Top 10), PCI DSS, ISO 27001 and GDPR
• It would also be helpful if you have experience setting up or growing a security champions programme, running risk assessments, or a working knowledge of regulatory compliance standards

More information:

Enjoy fantastic perks like private healthcare & dental insurance, a generous work from abroad policy, 2-for-1 share purchase plans, an EV Scheme to further reduce carbon emissions, extra festive time off, and excellent family-friendly benefits.

We prioritise career growth with clear career paths, transparent pay bands, personal learning budgets, and regular learning days. Jump on board and supercharge your career from day one!

We're operating a hybrid model and ask that Trainliners work from the office a minimum of 60% of their time over a 12-week period. We also have a 28-day Work from Abroad policy.

Our values represent the things that matter most to us and what we live and breathe everyday, in everything we do:

• 💭 Think Big - We're building the future of rail
• ✔️ Own It - We focus on every customer, partner and journey
• 🤝 Travel Together - We're one team
• ♻️ Do Good - We make a positive impact

We know that having a diverse team makes us better and helps us succeed. And we mean all forms of diversity - gender, ethnicity, sexuality, disability, nationality and diversity of thought. That's why we're committed to creating inclusive places to work, where everyone belongs and differences are valued and celebrated.

Interested in finding out more about what it's like to work at Trainline? Why not check us out on LinkedIn , Instagram and Glassdoor !