Senior Application Security Engineer

About the Job
The company sets the benchmark for service delivery and excellence in the iGaming industry. We play a key role in the success of our clients, including a brand relied upon by the world’s biggest online casinos for its cutting-edge products. Our mission is to deliver exceptional gaming experiences to millions of players worldwide.

With a global team of over 10,000 talented and driven professionals, we are shaping the future of iGaming. Headquartered in Gibraltar, we have offices in multiple countries, including Canada, India, the Isle of Man, Latvia, Malta, Romania, Serbia, Bulgaria, and the UAE.

At the company, we pride ourselves on creating growth opportunities at all levels, investing in our people, and forging strategic partnerships.

About The Role
The Senior Application Security Engineer acts as a technical authority. This role ensures secure design, development, deployment, and integrity across both on-prem and SaaS environments. Candidates should be comfortable wearing multiple hats and thriving in a fast-paced, collaborative environment.

Key Responsibilities:

• Define and mature secure SDLC and AppSec program frameworks.
• Embed secure coding practices into development and backend platform engineering.
• Lead threat modeling and high-risk security reviews for major releases.
• Implement application security testing tools (e.g., SCA, ASPM), container scanning, and secrets detection in CI/CD pipelines.
• Perform Penetration Testing and manage external penetration testing efforts.
• Manage application vulnerabilities from identification to remediation.
• Provide guidance for development teams.
• Design, maintain, and enforce organization-wide paved roads and guardrails.

Qualifications:

• 5+ years in application security, secure architecture, or related functions.
• Demonstrated ability to influence senior engineering and product leadership.
• Proven implementation of CI/CD security automation and secure coding practices.
• Strong understanding of web, API, and microservice security.
• Experience with Java and JavaScript.
• Experience in Penetration Testing is required.
• Preferred: Knowledge of Kubernetes/container security.

Location: Dubai, United Arab Emirates
Work Conditions: Hybrid, Full-time
Relocation Support: Not provided
Language Requirements: Not specified.