---
title: 'Application Security Engineer at OakNorth'
canonical: 'https://feeny.ai/job/application-security-engineer-oaknorth-gurugram-cm2jrxr21cgw'
type: 'job'
last_seen: '2026-10-29'
---

# Application Security Engineer at OakNorth

- **Company:** OakNorth
- **Location:** Gurugram, India
- **Employment:** full-time
- **Work type:** hybrid
- **Posted:** 2026-10-26
- **Last confirmed live:** 2026-10-29
- **Apply:** https://jobs.ashbyhq.com/oaknorth/bad0d11f-9d31-4fdc-9b0c-e53c53427958

## Job description

## ABOUT US

At OakNorth, we're on a mission to empower ambitious businesses and the communities they serve. Since 2015, we've lent over $21 billion across the UK and US, helped create more than 58,000 new homes and 36,000 new jobs, and supported hundreds of thousands of personal savers — all while driving economic growth in the markets we serve.

## ABOUT THE ROLE

The Application Security Engineer is a hands-on, full-stack security role focused on fixing the hardest application and AI security problems — particularly those that cross team boundaries or involve architecture, authentication, and authorisation that automation cannot yet safely resolve. You'll take remediation load away from engineering teams so they can stay focused on delivery, working closely with the teams that detect, prioritise, and track vulnerabilities. You'll also contribute to the development of OakNorth's internal coding agent platforms, so security fixes can scale safely.

## WHAT YOU'LL DO

- Fix complex application security vulnerabilities directly, including architectural weaknesses and issues in legacy technology that automated remediation cannot yet handle safely.
- Lead remediation of problems that cross team and system boundaries, coordinating changes across multiple owners and services and seeing them through to resolution.
- Resolve authentication and authorisation weaknesses, including identity, access control, session and token handling, service-to-service trust and permission models.
- Act as a dedicated delivery vehicle for security remediation, reducing the fix burden on engineering teams so they can focus on product delivery.
- Interpret the output of security tooling (e.g., SAST, DAST, SCA, secrets, container and IaC scanning), validate findings, identify root causes and implement the right fix rather than only triaging.
- Secure agentic and AI-enabled systems, assessing and mitigating risks such as those in the OWASP Top 10 for Agentic Applications, including prompt injection, excessive agent permissions, tool misuse, insecure agent-to-agent communication and unsafe handling of agent outputs.
- Contribute to the development of our internal coding agent platforms, including remediation agents, by supplying specialist fixes, remediation patterns, evaluation cases and feedback on where agents succeed or fail.
- Define and build guardrails for agent-generated and human-written changes (e.g., least-privilege agent access, human approval points, secure defaults, shared libraries, pipeline checks and policy-as-code) so that changes are safe and vulnerabilities do not recur.
- Build and secure GitHub workflows and release pipelines, including GitHub Actions hardening, secrets and token handling, branch protection, dependency and supply chain controls, and security gates in CI/CD.
- Plan and deliver higher-risk changes safely, including testing, peer review, rollout and rollback approaches, in partnership with the teams that own the systems.
- Work with the teams that detect, prioritise and track vulnerabilities to take prioritised findings through to remediation, and identify recurring fix types that can be automated safely.
- Document remediation approaches, share knowledge and coach engineers on secure design, secure coding and the safe use of AI coding agents.
- Report on remediation progress, including backlog reduction, SLA performance and risk reduction, and provide evidence to support audit and regulatory requirements.

YOU'LL BE A GREAT FIT IF YOU HAVE… Engineering Skills

- Full stack engineering experience across front end, back end and APIs, with proficiency in one or more languages (e.g., Java, Python, C#, JavaScript/TypeScript) and the ability to work in unfamiliar and legacy codebases.
- Strong hands-on experience with GitHub (pull requests, code review, branch protection, code scanning) and GitHub Actions, including building and securing release pipelines.
- Working knowledge of cloud platforms, containers and infrastructure as code.
- Ability to review code, find vulnerabilities and implement practical, correct fixes.

Application Security Skills

- Strong application security knowledge, including the OWASP Top 10 and common vulnerability classes such as injection, broken access control, insecure deserialization and cryptographic weaknesses.
- Deep understanding of authentication and authorisation, including OAuth 2.0, OIDC, SAML, JWT and session handling, RBAC/ABAC models and service-to-service identity.
- Hands-on experience interpreting application security tooling output (SAST, DAST, SCA, secrets, container and IaC scanning), distinguishing true and false positives and finding root cause.
- Understanding of CI/CD and software supply chain security, including GitHub Actions risks such as untrusted input, over-privileged tokens and third-party action pinning.

AI & Agentic Security Skills

- Day-to-day experience using coding agents such as Claude to write, review and fix code, with sound judgement on where they are reliable and where they are not.
- Knowledge of and informed opinions on the OWASP Top 10 for Agentic Applications and related AI security risks, including prompt injection, tool and permission abuse, data leakage and agent identity.
- Ability to design guardrails, permission boundaries and evaluation approaches for AI agents and agent-generated changes.
- Ability to turn manual fixes into repeatable patterns and test cases that agent platforms can use.

Remediation & Architecture Skills

- Experience fixing architectural and design-level security issues, and making safe changes in systems with limited tests, documentation or clear ownership.
- Ability to plan and deliver changes that span multiple teams and services, managing dependencies and risk.
- Sound judgement on testing, rollout and rollback for higher-risk changes.

Collaboration & Communication Skills

- Ability to work as a trusted partner to engineering teams, explaining why a fix is needed and making it easy to adopt.
- Influence without direct authority across teams that own the affected systems, including stakeholders in different locations and time zones.
- Clear written and verbal communication, including documentation and progress reporting.

Mindset & Attributes

- Ownership and a bias to action: comfortable taking on ambiguous, hard problems and seeing them through to resolution.
- Pragmatic, risk-aware judgement when balancing speed of remediation against the risk of change.
- Curiosity and continuous learning as threats and agentic technologies evolve.

## WHAT WE OFFER

- Health & Protection: Medical cover for you, your family & parents; life and accidental cover at a multiple of your salary
- Wellbeing: Annual health check-ups, online doctor consultations, pharmacy discounts, nutritionist support, and an Employee Assistance Programme — all sponsored
- Time Off: Earned, casual/sick leave, public holidays, maternity & paternity leave
- Life Milestones: A financial gesture of support at marriage, childbirth, and bereavement
- Flexible Benefits: Tax-efficient allowances for internet, fuel, meals, leave & travel, and NPS
- Growth: Professional certification support, learning & development opportunities, childcare benefits, and paid volunteering days
- Our Workplace: Modern central offices, weekly business updates, team events, and great coffee — we work hard to build a culture worth showing up for

## About OakNorth

## Company Overview
- **One-liner**: OakNorth is a UK-based digital bank founded by entrepreneurs, providing fast, flexible business loans and competitive savings accounts to support ambitious businesses and savers.
- **Entity Type**: Private (fully-licensed digital bank, profitable; not publicly listed)
- **Headquarters**: London, United Kingdom
- **Founded**: 2015
- **Founders**: Rishi Khosla and Joel Perlman

## Core Business
- **Primary industry**: Digital banking, commercial lending, retail savings
- **Target customers**: Lower mid-market businesses (entrepreneur-led, scaling fast) seeking debt financing from £1m to tens of millions; retail savers in the UK.
- **Mission**: “Banking should be barrier-free” – inspired by the founders’ own frustrations with traditional lending, OakNorth aims to back proven businesses with fast, data-driven credit decisions.

## Products & Services
- **Business Loans**: Flexible, structured debt financing from £1m to tens of millions for growth capital, acquisitions, management buyouts, and property development/investment.
- **Business Banking**: Digital account with dedicated support, seamless payments and cash management for scaling businesses.
- **Personal Savings**: FSCS-protected savings accounts (up to £120,000) with competitive interest rates, offered via a digital platform.
- **OakNorth Credit Intelligence (OCI)**: Data-driven technology platform that gives lenders a forward-looking view for agile credit decisions (used internally and sold to other institutions).

## Market Standing
- **Valuation**: Not publicly disclosed (private company)
- **Key Metric**: Cumulative lending of over £15.1bn since inception (2025). Annual profit of £165.2m in 2025. Total capital ratio of 18.4%.
- **Notable Investors/Partners**: Founded and led by Rishi Khosla & Joel Perlman; backed by a range of institutional investors (details not fully public). Over 400,000 retail savers provide deposit funding. Partnered with LSE Generate for mentorship.
- **Growth Signals**: Named **Best Bank in the UK** at The Banker’s Bank of the Year Awards 2025. Recognised by CNBC/Statista as one of the UK’s Top 250 Fintechs. Expanded lending into the US in 2023. Built a diversified business including Business Banking capability. 61,000+ jobs and 36,000+ new homes created through lending. Offices in London, Manchester, Leeds, Bristol, Newcastle, Birmingham, New York (OCI), and India (Gurugram, Bengaluru, Hyderabad).

## Competitive Advantages
- **Data-driven credit underwriting**: Uses proprietary analytics (OCI) to assess future potential, not just past financials, enabling faster, more accurate lending decisions.
- **Founder-led, flat organisational structure**: Decision-making is fast, with less bureaucracy than traditional banks.
- **Disciplined profitability**: One of the few digital banks globally to be consistently profitable, with extremely low credit losses (4.5 basis points of cumulative facilities).
- **Customer obsession**: High NPS and a culture of “customer delight” rather than mere satisfaction.

## Strategic Focus
- **US expansion**: Scaling lending in the US lower mid-market where a similar structural gap exists.
- **Business Banking rollout**: Building a full business banking capability beyond loans to deepen customer relationships.
- **Technology and data**: Continuing to invest in the OakNorth Credit Intelligence platform and automation.
- **ESG and community**: Net zero target by 2045; 1+1% initiative (1% of profits and 1% of employee time to charity).
- **Talent and culture**: Expanding teams across UK, US, and India while maintaining a founder-led, high-autonomy culture.

## Why Work Here
- **Equity**: Employees receive equity in the business, sharing in growth.
- **Flat structure**: Opportunity to interact with senior leaders and have real impact regardless of tenure.
- **Autonomy**: Personal goal-setting with manager support; freedom to take on projects of interest.
- **Mission-driven**: Directly contribute to creating jobs, homes, and supporting ambitious entrepreneurs.
- **Culture**: Values include “Say it how it is” (honest communication), “10x” (set ambitious goals), “One team”, and “Momentum”.
- **Hybrid/Office**: Multiple office locations across UK (London, Manchester, Leeds, Bristol, Newcastle, Birmingham) plus New York and India. Specific remote policies not detailed but likely hybrid for most roles.
- **Recognition**: Work for a bank that has won “Best Bank in the UK” and is seen as a top fintech employer.

## Sources
1. [OakNorth.co.uk – Home](https://oaknorth.co.uk/)
2. [OakNorth.co.uk – About/Our Story](https://oaknorth.co.uk/about/)
3. [OakNorth.co.uk – Careers](https://oaknorth.co.uk/about/careers/)
4. [OakNorth.co.uk – Annual Report 2025 (PDF)](https://oaknorth.co.uk/wp-content/uploads/2026/03/Annual_Report_2025.pdf)
5. [OakNorth.co.uk – Jobs](https://oaknorth.co.uk/jobs/)

## Other roles at OakNorth

- [Salesforce nCino Consultant (6 months)](https://feeny.ai/job/salesforce-ncino-consultant-6-months-oaknorth-gurugram-wvdt3m8kg7rg) — Gurugram, India
- [Staff Engineer - Salesforce/ nCino](https://feeny.ai/job/staff-engineer-salesforce-ncino-oaknorth-gurugram-186c6z9dc2nc) — Gurugram, India
- [Senior Associate - Debt Finance](https://feeny.ai/job/senior-associate-debt-finance-oaknorth-manchester-pwtqrykdj40h) — Manchester
- [Associate Vice President - Financial Planning & Analysis](https://feeny.ai/job/associate-vice-president-financial-planning-analysis-oaknorth-gurugram-6fxbdcegnyxc) — Gurugram, India
- [Lead Engineer - Personal Savings](https://feeny.ai/job/lead-engineer-personal-savings-oaknorth-london-esm7ha02zqpr) — London, United Kingdom
- [Senior Director/Director, Debt Finance - Structured Finance](https://feeny.ai/job/senior-director-director-debt-finance-structured-finance-oaknorth-london-yg438ngx1na0) — London, United Kingdom
- [Manager, Financial Crime](https://feeny.ai/job/manager-financial-crime-oaknorth-london-g2hnjrc3gtga) — London, United Kingdom
- [Senior Analyst - Credit Analytics](https://feeny.ai/job/senior-analyst-credit-analytics-oaknorth-gurugram-epc7p2svhdp9) — Gurugram, India
- [Associate Vice President - Credit Analytics](https://feeny.ai/job/associate-vice-president-credit-analytics-oaknorth-gurugram-jy9670jeshbp) — Gurugram, India
- [Senior Director, Credit Risk - Real Estate](https://feeny.ai/job/senior-director-credit-risk-real-estate-oaknorth-london-fqt4141pb1rv) — London, United Kingdom