ph3About The Role /h3 pWe are looking for a hands‑on Senior Application Security Engineer to become a founding member of our security team. You will be joining a highly regulated iGaming environment where uptime, data integrity, and user trust are paramount. You will shape the security of our consumer‑facing platforms and of the cloud infrastructure they run on, balancing compliance requirements with the agility our business needs to grow. /p h3Responsibilities /h3 ul liSecure the Development Lifecycle: Embed security into every stage of how we build software, from threat modeling at design time to security review before release. Partner with engineering to make secure‑by‑default the path of least resistance. /li liAudit Web Native Applications: Drive and run security testing and code review across our web and mobile apps. /li liProtect the API Surface: Review and harden the APIs powering our platforms with focus on authorization and abuse prevention. /li liDefend the Perimeter: Manage and tune our WAF and DDoS mitigation. You understand that in our industry, availability is revenue. /li liSecure Cloud Infrastructure: Help harden our cloud environment where it matters most for application security. /li liAutomation Scripting: Automate security checks, reduce manual toil, and ensure consistent controls across our pipelines and environments. /li liCompliance Support: Act as the technical bridge for regulatory and ISO certifications. /li liBusiness Partnership: Work closely with engineering and product teams. You will champion a "Security by Design" culture, helping stakeholders understand risk without acting as a blocker to innovation. /li liStrategic partnership: Driving our collaboration with Google to architect the future of our AI workflows and security frameworks. /li /ul h3Qualifications /h3 ul liAppSec Specialist: Strong background in securing high‑scale,



consumer‑facing applications across mobile and web. Knowledge of the OWASP Top 10 and insights into its gaps. /li liCode Reviewer: Ability to read and audit code in modern high‑level languages and use automated tools. /li liNetworking Native: Deep foundational understanding of networking protocols (TCP/IP, DNS, HTTP/S, TLS). Ability to secure traffic at the protocol level. /li liCloud‑Comfortable: Working knowledge of cloud security, Kubernetes, and microservices trade‑offs at scale. /li liRegulated Background: Experience in industries with strict compliance requirements (iGaming, Fintech, or Healthcare) and understanding of the rigor required. /li liScripting Skills: Automation of security workflows with Python or similar. /li liPragmatic Communicator: Weigh business goals against security risk and explain to non‑technical stakeholders why a control matters. /li liProvider Management: Experience evaluating, onboarding, and managing external security vendors or managed service providers. /li /ul h3Benefits /h3 ul liHybrid work policy (3 days a week of working from the office) /li li4 weeks of Workation (TC apply) /li li300 EUR wellness contribution annually /li liCobee – benefits app with versátil compensation and discounts /li liHealth insurance (we use Alan) /li liLife insurance /li liEmployee Assistance Program (free emotional, legal, and financial support) /li liShort Fridays – we work until 16:00 /li liComplimentary snacks and drinks in our offices, Monday breakfast and Wednesday fika /li liTeam and office social events throughout the year /li liImpact: Be a founding member of the security team, helping shape our application security practice and tooling from the ground up. /li liHigh‑Stakes Challenge: Work in an environment where security directly affects user trust, real‑time operations, and the bottom line. /li /ul /p #J-18808-Ljbffr

📌 Senior Application Security Engineer (Málaga)
🏢 Leovegas Group
📍 Málaga