Security Training Lab Developer

SecureFlag is a fast-growing London-based startup on a mission to make application security training genuinely useful for developers. Our platform lets developers learn secure coding through hands-on, real-world exercises — not slides or quizzes, but actual vulnerable apps they can break and fix.

This is an entry-level, technical, hands-on position at the intersection of security and engineering. If you're early in your career, comfortable with Linux and programming, and curious about security, this is a great place to start.

You'll spend your time building, testing, and maintaining the security training labs that thousands of developers around the world use to sharpen their skills.

In practice, that means:

• Testing and QA-ing labs: running through exercises as a user would, catching bugs, edge cases, and broken flows before they reach production
• Troubleshooting environments: diagnosing why a container misbehaves, a flag isn't triggering, or a scenario breaks under specific conditions
• Building new lab content: implementing vulnerable application scenarios across a range of technologies and languages
• Evolving into a lab developer: over time, you'll take increasing ownership of the design and development of new security labs in our catalogue

You do need to be curious, technically grounded, and willing to dig into problems until they're solved.

• Permanent, full-time: up to £35,000 p/a
• Fully remote with optional team events in London and security conferences worldwide
• Flexible working hours (we operate mainly in GMT/GMT+1)
• Personal training budget
• Join a highly talented, dynamic team where you’ll learn from the best and see your work make a real impact.
• The opportunity to influence how tens of thousands of engineers learn to write secure code
  

• Solid hands-on experience with Linux and the command line

Browse our curated collection of remote jobs across all categories and industries, featuring positions from top companies worldwide.

• Comfortable working with Docker (building images, debugging containers, understanding networking)
• Ability to read and write basic code in multiple languages — Python is essential; Shell Scripting, Java, JavaScript, PHP, C#, or others are a plus
• A methodical approach to troubleshooting: you know how to isolate a problem and work through it systematically
• Good written English — you'll review and write lab instructions and internal documentation that need to be clear and precise

Nice to have:

• Exposure to security topics (web vulnerabilities, CTFs, bug bounty, offensive security tooling)
• Familiarity with CI/CD or other DevOps tooling
• Experience with Burp Suite, Zap, semgrep or other DAST and SAST software

A degree in engineering, computer science, or a related field is a plus, but not required if you can demonstrate the technical foundations above.