Senior Application Security Engineer

LionHires

WorldwideremotePosted 11 days ago

Skill Required

Application-Security-EngineerSecurity-EngineerInfosecCybersecurity-EngineerDevSecOps-EngineerSenior-Application-Security-EngineerLead-Application-Security-EngineerSenior-Information-Security-EngineerApplication-Security-ArchitectApplication-Security-LeadSenior-Cybersecurity-EngineerSecurity EngineerApplication DevelopersecurityShell ScriptingAWSMicroservicesCybersecurityCD pipelinesIstioEngineeringJavaScriptTypeScriptKubernetesISO 27001automationTerraformJenkinsbuildingfintechPythonDockerdesignGitCI/CDAgileCloudDesign PatternsFulltime

Key highlights

Level Required: Senior Application Security Engineer.
Compensation: Competitive compensation.
Key benefit: Health coverage.
Notable requirement: Proven experience analyzing and securing JavaScript/TypeScript applications.
Additional benefit: Flexible working arrangements.
Cross-functional collaboration with engineering, fraud, and payments teams.

Role overview

Senior Application Security Engineer role at a fintech, iGaming, and marketing technology company transitioning from legacy data centers to AWS. The position involves designing secure cloud infrastructure, leading threat modeling automation, and influencing security roadmaps, while offering ownership of security architecture and protection of financial data.

Responsibilities

Design and implement robust security architecture spanning from cloud infrastructure down to the application layer, ensuring "secure by design" principles are met.
Collaborate closely with product managers, architects, and developers to build and scale the security controls platform ecosystem.
Validate and prove security implementations within infrastructure, application deployment manifests, and automated CI/CD pipelines.
Define critical policies, controls, and capabilities to protect global products and environments.
Build and automate declarative threat modeling to proactively identify and mitigate application risks.
Oversee the product security strategy for migrating legacy data center workloads to the public cloud (AWS).
Serve as a trusted cybersecurity advisor to engineering and product teams, participating actively in planning cycles and technical committees.

Requirements

Microservices Security: Proven experience analyzing and securing applications developed using JavaScript and TypeScript.
DevSecOps Core: Hands-on experience integrating security scanning/tooling into CI/CD pipelines (GitLab, Jenkins) and utilizing Infrastructure-as-Code models (Terraform, Helm, or CloudFormation).
Scripting Skills: Strong development experience in Python and Shell scripting.
Modern Infrastructure: Deep familiarity with Docker and service mesh technologies (such as ISTIO).
Security Assessments: Strong background in architecture/security reviews, threat modeling, and application risk mitigation within an Agile framework.
Software Integrity: A rock-solid understanding of supply chain security, software integrity, and secure software delivery.
Compliance & Privacy: Familiarity with industry regulations and frameworks (PCI-DSS, ISO 27001, NIST) and privacy laws like GDPR.