Senior Application Security Engineer

OverviewIn this role you will embed security across the software lifecycle for consumer-facing platforms in a regulated iGaming setting.You will work with engineering and product teams to enable secure-by-default delivery while meeting compliance needs.You’ll defend APIs, cloud infrastructure, and the development process, balancing risk with the need for agility.You will also help shape security tooling and partner with Google on future AI security frameworks, playing a pivotal role in safeguarding uptime and user trust.Compensaciones / BeneficiosHybrid work policyWorkationWellness contributionHealth insuranceLife insuranceShort FridaysResponsabilidadesEmbed security into the end-to-end software development lifecycle and promote secure-by-default practicesAudit web and native applications through security testing and code reviewsHarden APIs with a focus on authorization and abuse preventionManage and tune the WAF and DDoS mitigation to protect availabilityStrengthen cloud infrastructure security, including Kubernetes environmentsAutomate security checks across pipelines and environmentsSupport regulatory and ISO compliance efforts with technical guidanceCollaborate with engineering and product teams to foster a Security by Design culturePartner with Google to shape AI security workflows and frameworksRequisitos principalesAppSec Specialist with experience securing high-scale consumer apps across mobile and webCode reviewer capable of reading and auditing code and using automated toolsNetworking native with solid understanding of TCP/IP, DNS, HTTP/S, TLSCloud security familiarity, Kubernetes competence, microservices at scaleExperience in regulated industries (iGaming, Fintech or Healthcare)Scripting skills with Python or similarPragmatic communicator able to explain security risks to non-technical stakeholdersProvider management experience with external security vendors or MSPsPragmatic communicationCollaborationBusiness-minded risk assessmentOWASP Top 10Code auditing and automated security toolingNetworking fundamentals (TCP/IP, DNS, HTTP/S, TLS)

Requisitos principalesAppSec Specialist with experience securing high-scale consumer apps across mobile and web Code reviewer capable of reading and auditing code and using automated tools Networking native with solid understanding of TCP/IP, DNS, HTTP/S, TLS Cloud security familiarity, Kubernetes competence, microservices at scale Experience in regulated industries (iGaming, Fintech or Healthcare) Scripting skills with Python or similar Pragmatic communicator able to explain security risks to non-technical stakeholders Provider management experience with external security vendors or MSPs Pragmatic communication Collaboration Business-minded risk assessment OWASP Top 10 Code auditing and automated security tooling