Principal Appsec Engineer
Super Technologies is seeking a Principal AppSec Engineer to lead the team's deep offensive security capabilities. This role is responsible for preventing vulnerabilities before code reaches production and ensuring security testing is integrated into all development processes. The engineer will report to the Product Security Lead and set the standard for pentest quality across the organisation.
The position involves conducting adversary emulation and bypass testing against production systems to identify exploitable weaknesses. The Principal AppSec Engineer will also lead complex architecture reviews, mentor junior team members, and scale AI-assisted security tooling to enhance overall testing coverage.
- Run adversary emulation and bypass testing against production systems to identify exploitable weaknesses.
- Own the standardised pentest playbooks used for urgent "launching next week" requests and personally handle the highest-complexity engagements.
- Lead in-depth architecture and design reviews for high-risk features, threat-modelling before code is written and producing security requirements and sign-off.
- Mature and scale AI-assisted pentest tooling (e.g. NEO, regression code scanning) to increase testing coverage.
- Mentor less experienced AppSec engineers in pentest methodology and adversarial thinking.
- Feed confirmed bypass and pentest findings to Detection Engineering & Threat Hunting so each becomes a shipped detection.
- Contribute to the vendor security testing element of the shared vendor intake process for high-risk vendors.
- 6+ years' experience in offensive security - pentesting, red teaming, or adversary emulation - ideally including production/live-environment experience (required).
- Strong architecture review skills, with the ability to threat-model a system from a design document rather than only testing a finished build (required).
- Familiarity with the modern AppSec tooling landscape (SAST/DAST, AI-assisted pentest tools) (required).
- Comfortable acting as the technical escalation point for the team's hardest problems (required).
- Experience running or contributing to bug bounty triage or vulnerability-disclosure programmes (nice-to-have).
- Medical / Health Insurance
- Open Annual Leave
- Employee Assistance Programme
- Training & Learning Development
Superbet, which operates under the Super Technologies banner, is a multinational sports betting and gaming group founded in 2008 in Romania by Sacha Dragic. Headquartered in Bucharest, it began with retail betting shops and has grown into one of the leading omni-channel betting operators in Central and Eastern Europe, with a strong focus on digital products. The group employs more than 5,000 people and operates across around a dozen European markets as well as Brazil. Its offices span Romania, Poland, Serbia, the UK, the Netherlands, Belgium, Spain, Croatia, Brazil, Malta and Gibraltar.
