application security engineer for fintech and iGaming products

The company develops fintech and iGaming products.

• Deliver security initiatives across applications, cloud infrastructure, and internal platforms in collaboration with engineering and product teams
• Design, review, and continuously improve secure architectures based on secure-by-design principles
• Integrate security into development workflows and product lifecycles with Product Managers, Software Engineers, Architects, and DevOps teams
• Assess security controls across cloud environments, applications, and CI/CD pipelines for alignment with security best practices
• Develop, maintain, and promote security standards, policies, and technical controls to protect systems and infrastructure
• Build and enhance automated threat modelling capabilities for secure software development
• Contribute security guidance to architecture reviews and technical planning throughout the software development lifecycle
• Support secure migration of applications and infrastructure from on-premises environments as part of cloud transformation initiatives
• Identify risks and recommend practical mitigation strategies as a security partner to engineering teams

• Proven experience integrating security tooling and automated security controls into modern CI/CD workflows
• Hands-on experience securing applications and microservices built with JavaScript and TypeScript
• Strong understanding of CI/CD platforms and Infrastructure-as-Code technologies such as Terraform, Helm, CloudFormation, or equivalent tools
• Experience with scripting or automation using Python and/or Shell
• Good knowledge of software supply chain security, secure build pipelines, software integrity, and release security practices
• Practical experience with Docker, container technologies, and service mesh solutions such as Istio
• Ability to perform security architecture reviews, threat modelling exercises, and application security assessments
• Experience working within Agile software development teams
• Familiarity with recognised security frameworks and compliance standards, including PCI DSS, ISO 27001, NIST, or similar
• English at upper-intermediate level or higher
• Будет плюсом: understanding of data protection and privacy regulations such as GDPR, experience securing Kubernetes-based environments, experience designing secure solutions for AWS and/or hybrid or on-premises infrastructure, industry certifications such as CISSP, CISM, CCSP, CCSK, CEH, or equivalent

• Competitive salary based on experience
• Paid annual leave and sick leave
• Opportunities for professional and career growth
• Supportive environment focused on continuous development and long-term growth