Application Security Engineer

About the role

We are seeking a senior Application Security Engineer to embed "secure by design" principles across cloud infrastructure and micro‑service applications. You will act as a trusted advisor, guiding the transition from legacy data‑centers to AWS while championing supply‑chain security and automated threat modeling.

Key responsibilities

• Design and implement security architecture from cloud infrastructure to the application layer.
• Collaborate with product managers, architects, and developers to build and scale a security controls platform.
• Validate security implementations in infrastructure, deployment manifests, and CI/CD pipelines.
• Define policies, controls, and capabilities protecting global products and environments.
• Automate declarative threat modeling to proactively mitigate application risks.
• Lead product security strategy for migrating legacy workloads to AWS.
• Serve as a cybersecurity advisor in planning cycles and technical committees.

Required profile

• Proven experience securing micro‑service applications built with JavaScript/TypeScript.
• Hands‑on DevSecOps experience integrating security tools into GitLab or Jenkins pipelines.
• Strong scripting ability in Python and Shell.
• Deep familiarity with Docker, Istio, and Kubernetes on AWS.
• Experience conducting architecture reviews, threat modeling, and risk mitigation in Agile environments.
• Knowledge of supply‑chain security, software integrity, and compliance frameworks (PCI‑DSS, ISO 27001, NIST, GDPR).

Required skills

• JavaScript
• TypeScript
• Python
• Shell scripting
• GitLab
• Jenkins
• Terraform
• Helm
• CloudFormation
• AWS
• Kubernetes
• Docker
• Istio
• Threat modeling
• Supply‑chain security
• PCI‑DSS
• ISO 27001
• NIST
• GDPR

What we offer

• True ownership of security roadmap and architectural decisions.
• Opportunity to work on high‑scale, fast‑growing fintech, iGaming, and marketing products.
• Impactful work protecting production environments at scale.