FNZ
Application Security Engineer
Full details on LinkedIn
The complete job description, requirements, and application details are available on the original posting.
About FNZ
FNZ is a global fintech company based in Edinburgh, United Kingdom, founded in 2003. It offers a comprehensive wealth management platform that integrates technology, business operations, and investment services for financial institutions, asset managers, wealth managers, private banks, and securities houses. The platform addresses challenges such as legacy technology and regulatory compliance, enabling clients to scale operations and deliver personalized digital experiences to over 30 million end investors across more than 30 countries, managing approximately USD 1.5 trillion in assets. The core-to-digital wealth management platform includes services like asset administration, transaction processing, and business process outsourcing. Key features encompass investment product access, advanced analytics, client data management, and sustainability options through FNZ Impact. The platform supports quick market entry and cost reduction, while also offering tailored solutions for private banking and asset management. FNZ collaborates with over 650 financial institutions globally, helping them innovate and expand their services.
Security at FNZ
Compiled from public job postings, careers pages, and company materials. Data may not reflect current state — verify during interviews.
Security Philosophy
“FNZ's stated mission is to 'Embed compliance, resilience, and security by design.' Their approach emphasizes developer enablement through a culture of 'engineering discipline, collaboration, automation, and continuous improvement.' The risk philosophy is grounded in 'Minimum Mandatory Standards to ensure compliance with ISO27001,' with a strong focus on implementing automation to 'reduce manual effort.'”
Security Team
- The AppSec function at FNZ reports into the Head of Cyber Platform Engineering.
- Key public-facing staff include Matt A. (Application Security Engineer), Matthew Buchan (Security Testing Specialist), and Shikhar Madhavdas (Security Testing Specialist).
- As of, there is at least one active 'Lead Cyber Security Engineer' vacancy.
- Common skill patterns identified include vulnerability management, static analysis, and automation using Python.
Key Initiatives
FNZ practices 'Shift Left' by 'developing Python automation to notify on failed scans' and has 'onboarded thousands of projects across dozens of platforms.' Their Secure SDLC involves 'Daily adherence to software development life cycle (SDLC) process' and 'Oversight of code review during the change management process.' Vulnerability management includes 'coordinating penetration testing activities.' No evidence was found for a formal Security Champions program.
Preparing for an AppSec interview?
Get the weekly briefing 2,000+ security pros trust.