Senior Application Security Engineer

OP is a fast-growing iGaming startup building next-generation gaming experiences. They are seeking a Senior Application Security Engineer to embed security into the SDLC, lead threat modeling, and perform secure code reviews while collaborating with engineering teams.

Responsibilities:

• Bring informed perspectives on AppSec tooling and practices
• Embed security into the SDLC by partnering with engineering teams to define security requirements, patterns, and 'secure-by-design' implementation guidance for new features and platform changes
• Lead or facilitate threat modeling and security design reviews for core user journeys (registration, login, wallet, deposits/withdrawals, gameplay, promotions, account management)
• Perform and/or oversee secure code reviews and deep-dive manual assessments on high-risk services (auth, wallet, payments, bonus engines, admin tooling)
• Define and maintain secure coding standards aligned to industry frameworks (e.g., OWASP, NIST) and ensure consistent adoption across teams
• Deliver security coaching and training for developers to improve secure coding habits and reduce recurring vulnerabilities, classes
• Hands-on experience using AI platforms to accelerate development, testing, code reviews, and security scans
• Experience working in Agile/Scrum environments

Requirements:

• Bring informed perspectives on AppSec tooling and practices
• Embed security into the SDLC by partnering with engineering teams to define security requirements, patterns, and 'secure-by-design' implementation guidance for new features and platform changes
• Lead or facilitate threat modeling and security design reviews for core user journeys (registration, login, wallet, deposits/withdrawals, gameplay, promotions, account management)
• Perform and/or oversee secure code reviews and deep-dive manual assessments on high-risk services (auth, wallet, payments, bonus engines, admin tooling)
• Define and maintain secure coding standards aligned to industry frameworks (e.g., OWASP, NIST) and ensure consistent adoption across teams
• Deliver security coaching and training for developers to improve secure coding habits and reduce recurring vulnerabilities, classes
• Hands-on experience using AI platforms to accelerate development, testing, code reviews, and security scans
• Experience working in Agile/Scrum environments
• FinTech, gaming, casino, or experience