Overview
¿Le gusta esta oportunidad? Asegúrese de inscribirse ágil, ya que se espera un gran volumen de solicitudes. Desplácese hacia abajo para leer la descripción completa del puesto.
In this role you will embed security across the software lifecycle for consumer-facing platforms in a regulated iGaming setting. You will work with engineering and product teams to enable secure-by-default delivery while meeting compliance needs. You’ll defend APIs, cloud infrastructure, and the development process, balancing risk with the need for agility. You will also help shape security tooling and partner with Google on future AI security frameworks, playing a pivotal role in safeguarding uptime and user trust.
Compensaciones / Beneficios
Hybrid work policy
Workation
Wellness contribution
Health insurance
Life insurance
Short Fridays
Responsabilidades
Embed security into the end-to-end software development lifecycle and promote secure-by-default practices
Audit web and native applications through security testing and code reviews
Harden APIs with a focus on authorization and abuse prevention
Manage and tune the WAF and DDoS mitigation to protect availability
Strengthen cloud infrastructure security,



including Kubernetes environments
Automate security checks across pipelines and environments
Support regulatory and ISO compliance efforts with technical guidance
Collaborate with engineering and product teams to foster a Security by Design culture
Partner with Google to shape AI security workflows and frameworks
Requisitos principales
AppSec Specialist with experience securing high-scale consumer apps across mobile and web
Code reviewer capable of reading and auditing code and using automated tools
Networking native with solid understanding of TCP/IP, DNS, HTTP/S, xqbhyrx TLS
Cloud security familiarity, Kubernetes competence, microservices at scale
Experience in regulated industries (iGaming, Fintech or Healthcare)
Scripting skills with Python or similar
Pragmatic communicator able to explain security risks to non-technical stakeholders
Provider management experience with external security vendors or MSPs
Pragmatic communication
Collaboration
Business-minded risk assessment
OWASP Top 10
Code auditing and automated security tooling
Networking fundamentals (TCP/IP, DNS, HTTP/S, TLS)

📌 Senior Application Security Engineer (Málaga)
🏢 LeoVegas
📍 Málaga