Application Security Engineer

We are looking for an experienced Application Security Engineer to join a fast-growing software development company delivering fintech and iGaming products. In this role, you will help embed security into the software development lifecycle, working closely with engineering teams to build secure, resilient, and scalable applications and cloud infrastructure.

Responsibilities:

• Work closely with engineering and product teams to deliver security initiatives across applications, cloud infrastructure, and internal platforms.
• Design, review, and continuously improve secure architectures following secure-by-design principles.
• Collaborate with Product Managers, Software Engineers, Architects, and DevOps teams to integrate security into development workflows and product lifecycles.
• Assess the implementation of security controls across cloud environments, applications, and CI/CD pipelines, ensuring alignment with security best practices.
• Develop, maintain, and promote security standards, policies, and technical controls to protect systems and infrastructure.
• Build and enhance automated threat modelling capabilities to support secure software development.
• Contribute to architecture reviews and technical planning by providing security guidance throughout the software development lifecycle.
• Support cloud transformation initiatives by helping ensure the secure migration of applications and infrastructure from on-premises environments.
• Act as a trusted security partner for engineering teams, identifying risks and recommending practical mitigation strategies.

Requirements:

• Proven experience integrating security tooling and automated security controls into modern CI/CD workflows.
• Hands-on experience securing applications and microservices built with JavaScript and TypeScript.
• Strong understanding of CI/CD platforms together with Infrastructure-as-Code technologies such as Terraform, Helm, CloudFormation, or equivalent tools.
• Experience with scripting or automation using Python and/or Shell.
• Good knowledge of software supply chain security, secure build pipelines, software integrity, and release security practices.
• Practical experience with Docker, container technologies, and service mesh solutions such as Istio.
• Ability to perform security architecture reviews, threat modelling exercises, and application security assessments.
• Experience working within Agile software development teams.
• Familiarity with recognised security frameworks and compliance standards, including PCI DSS, ISO 27001, NIST, or similar.
• Understanding of data protection and privacy regulations such as GDPR is considered an advantage.
• Experience securing Kubernetes-based environments is a plus.
• Experience designing secure solutions for AWS and/or hybrid or on-premises infrastructure is desirable.
• Industry certifications such as CISSP, CISM, CCSP, CCSK, CEH, or equivalent are considered an advantage.
• English level: Upper-intermediate or higher

What’s in it for you:

· 24 days of annual leave plus paid sick leave

· Private health insurance and a sports & wellbeing allowance

· Recognition gifts for important life milestones

· Learning & development budget for courses, certifications and conferences

· Regular team events and company gatherings

· Clear opportunities for career growth in a fast-growing business

Company-supported language learning