Senior Application Security Engineer
The Senior Application Security Engineer acts as a technical authority. This role ensures secure design, development, deployment, and integrity across both on-prem and SaaS environments.
You should be comfortable wearing multiple hats and thrive in a fast-paced, collaborative environment.
- Define and mature secure SDLC and AppSec program frameworks.
- Embed secure coding practices into development and backend platform engineering.
- Lead threat modeling and high-risk security reviews for major releases.
- Implement application security testing tools (e.g. SCA, ASPM), container scanning, and secrets detection in CI/CD pipelines.
- Perform Penetration Testing and manage external penetration testing efforts.
- Manage application vulnerabilities from identification to remediation.
- Provide guidance for development teams.
- Design, maintain, and enforce organization-wide paved roads and guardrails
- 5+ years in application security, secure architecture, or related functions (required).
- Demonstrated ability to influence senior engineering and product leadership (required).
- Proven implementation of CI/CD security automation and secure coding practices (required).
- Strong understanding of web, API, and microservice security (required).
- Experience with Java, Javascript (required).
- Experience in Penetration Testing (required).
- Kubernetes/container security knowledge (preferred).
Pragmatic Play is a leading content provider to the iGaming industry, delivering a multi-product portfolio of online slots, live casino, bingo and virtual sports to operators worldwide. Founded in 2015 and headquartered in Gibraltar, it releases new titles at a high cadence and is certified across numerous regulated markets. It operates as part of the ARRISE group, which runs the live-casino studios and operational hubs across Europe, the Middle East and Latin America that power its games.