Application Security Engineer

We are looking for an experienced Application Security Engineer to join a fast-growing software development company delivering fintech and iGaming products. In this role, you will help embed security into the software development lifecycle, working closely with engineering teams to build secure, resilient, and scalable applications and cloud infrastructure.

Responsibilities:

• Work closely with engineering and product teams to deliver security initiatives across applications, cloud infrastructure, and internal platforms

• Design, review, and continuously improve secure architectures following secure-by-design principles

• Collaborate with Product Managers, Software Engineers, Architects, and DevOps teams to integrate security into development workflows and product lifecycles

• Assess the implementation of security controls across cloud environments, applications, and CI/CD pipelines, ensuring alignment with security best practices

• Develop, maintain, and promote security standards, policies, and technical controls to protect systems and infrastructure

• Build and enhance automated threat modelling capabilities to support secure software development

• Contribute to architecture reviews and technical planning by providing security guidance throughout the software development lifecycle

• Support cloud transformation initiatives by helping ensure the secure migration of applications and infrastructure from on-premises environments

• Act as a trusted security partner for engineering teams, identifying risks and recommending practical mitigation strategies

Requirements:

• Proven experience integrating security tooling and automated security controls into modern CI/CD workflows

• Hands-on experience securing applications and microservices built with JavaScript and TypeScript

• Strong understanding of CI/CD platforms together with Infrastructure-as-Code technologies such as Terraform, Helm, CloudFormation, or equivalent tools

• Experience with scripting or automation using Python and/or Shell

• Good knowledge of software supply chain security, secure build pipelines, software integrity, and release security practices

• Practical experience with Docker, container technologies, and service mesh solutions such as Istio

• Ability to perform security architecture reviews, threat modelling exercises, and application security assessments

• Experience working within Agile software development teams

• Familiarity with recognised security frameworks and compliance standards, including PCI DSS, ISO 27001, NIST, or similar

• Understanding of data protection and privacy regulations such as GDPR is considered an advantage

• Experience securing Kubernetes-based environments is a plus

• Experience designing secure solutions for AWS and/or hybrid or on-premises infrastructure is desirable

• Industry certifications such as CISSP, CISM, CCSP, CCSK, CEH, or equivalent are considered an advantage

• English level: Upper-intermediate or higher

What’s in it for you:

• Fully remote working format

• Competitive salary based on experience

• Paid annual leave and sick leave

• Opportunities for professional and career growth

• Supportive environment focused on continuous development and long-term growth